Default Login Details
User’s Guide
XGS4600 Series
Layer 3 Managed Stackable Gigabit Ethernet Switch
Out-of-Band
MGMT Port
In-Band Ports http://DHCP-assigned IP
User Name admin
Password 1234
http://192.168.0.1
or
http://192.168.1.1
Version 4.70 Edition 1, 12/2020
Copyright © 2020 Zyxel Communications Corporation
IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots
and graphics in this book may differ slightly from your product due to differences in your product
firmware or your computer operating system. Every effort has been made to ensure that the information
in this manual is accurate.
Related Documentation
• User’s Guide
Go to the download library of the Zyxel website to get a myZyxel.com User’s Guide to see how to
register your Zyxel Device and activate a license.
•CLI Reference Guide
This guide explains how to use the Command-Line Interface (CLI) to configure the Switch.
Note: It is recommended you use the Web Configurator to configure the Switch.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary information.
•More Information
Go to https://businessforum.zyxel.com for product discussions.
Go to support.zyxel.com to find other information on the Switch
.
XGS4600 Series User’s Guide
2
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may need to
configure or helpful tips) or recommendations.
Syntax Conventions
• All models may be referred to as the “Switch” in this guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Basic Setting >
IP Setup > IP Configuration > Network Proxy Configuration means you first click Basic Setting in the
navigation panel, then the IP Setup sub menu, then IP Configuration and finally Network Proxy
Configuration to get to that screen.
Icons Used in Figures
Figures in this user guide may use the following generic icons. The Switch icon is not an exact
representation of your device.
Switch Generic Router Wireless Router / Access Point
Generic Switch Smart TV Desktop
Laptop IP Camera Printer
Server
XGS4600 Series User’s Guide
3
Contents Overview
Contents Overview
User’s Guide ......................................................................................................................................24
Getting to Know Your Switch .............................................................................................................. 25
Hardware Installation and Connection ............................................................................................. 30
Hardware Panels .................................................................................................................................. 34
Technical Reference ........................................................................................................................44
Web Configurator ................................................................................................................................. 45
Initial Setup Example ............................................................................................................................ 61
Tutorials .................................................................................................................................................. 65
Status ...................................................................................................................................................... 77
Basic Setting .......................................................................................................................................... 83
VLAN .................................................................................................................................................... 121
Static MAC Forwarding ...................................................................................................................... 147
Static Multicast Forwarding ............................................................................................................... 150
Filtering ................................................................................................................................................. 153
Spanning Tree Protocol ...................................................................................................................... 155
Bandwidth Control ............................................................................................................................. 181
Broadcast Storm Control ................................................................................................................... 184
Mirroring ............................................................................................................................................... 187
Link Aggregation ................................................................................................................................ 198
Port Authentication ............................................................................................................................ 208
Port Security ......................................................................................................................................... 225
Time Range ......................................................................................................................................... 229
Classifier ............................................................................................................................................... 231
Policy Rule ........................................................................................................................................... 240
Queuing Method ................................................................................................................................ 245
VLAN Stacking .................................................................................................................................... 249
Multicast .............................................................................................................................................. 257
AAA ...................................................................................................................................................... 283
IP Source Guard .................................................................................................................................. 296
DHCP Snooping .................................................................................................................................. 301
ARP Inspection .................................................................................................................................... 312
Loop Guard ......................................................................................................................................... 330
VLAN Mapping ................................................................................................................................... 334
Layer 2 Protocol Tunneling ................................................................................................................ 338
sFlow ..................................................................................................................................................... 343
PPPoE ................................................................................................................................................... 347
Error-Disable ........................................................................................................................................ 356
XGS4600 Series User’s Guide
4
Contents Overview
VLAN Isolation ..................................................................................................................................... 363
MAC Pinning ....................................................................................................................................... 365
Private VLAN ....................................................................................................................................... 368
Green Ethernet ................................................................................................................................... 372
Link Layer Discovery Protocol (LLDP) ................................................................................................ 375
Anti-Arpscan ....................................................................................................................................... 403
BPDU Guard ........................................................................................................................................ 409
OAM ..................................................................................................................................................... 413
ZULD ...................................................................................................................................................... 422
NLB ........................................................................................................................................................ 428
Wol Relay ............................................................................................................................................. 433
Static Route ......................................................................................................................................... 435
Policy Routing ..................................................................................................................................... 439
RIP ......................................................................................................................................................... 443
OSPF ..................................................................................................................................................... 448
IGMP ..................................................................................................................................................... 470
DVMRP ................................................................................................................................................. 474
Differentiated Services ....................................................................................................................... 478
DHCP .................................................................................................................................................... 482
VRRP ..................................................................................................................................................... 501
Router Setup ........................................................................................................................................ 510
ARP Setup ............................................................................................................................................ 512
Maintenance ...................................................................................................................................... 518
Access Control .................................................................................................................................... 535
Diagnostic ........................................................................................................................................... 560
System Log .......................................................................................................................................... 564
Syslog Setup ........................................................................................................................................ 565
Cluster Management ......................................................................................................................... 568
MAC Table ........................................................................................................................................... 574
IP Table ................................................................................................................................................. 577
ARP Table ............................................................................................................................................ 579
Routing Table ...................................................................................................................................... 581
Path MTU Table ................................................................................................................................... 584
Configure Clone ................................................................................................................................. 585
IPv6 Neighbor Table ........................................................................................................................... 589
Port Status ............................................................................................................................................ 591
Service Register ................................................................................................................................... 602
Troubleshooting and Appendices .................................................................................................604
Troubleshooting .................................................................................................................................. 605
XGS4600 Series User’s Guide
5
Table of Contents
Table of Contents
Document Conventions .................................................................. ....................................................3
Contents Overview..............................................................................................................................4
Table of Contents.................................................................................................................................6
Part I: User’s Guide.......................................................................................... 24
Chapter 1
Getting to Know Your Switch ............................................................................................................25
1.1 Introduction ..................................................................................................................................... 25
1.1.1 License Option ...................................................................................................................... 25
1.1.2 Stacking Mode ...................................................................................................................... 25
1.1.3 ZON Utility ............................................................................................................................... 26
1.2 Example Applications .................................................................................................................... 26
1.2.1 Bridging or Fiber Uplink Example Application .................................................................... 26
1.2.2 High Performance Switching Example ............................................................................... 27
1.2.3 Gigabit Ethernet to the Desktop ......................................................................................... 27
1.2.4 IEEE 802.1Q VLAN Application Examples ........................................................................... 28
1.2.5 IPv6 Support ........................................................................................................................... 29
1.3 Ways to Manage the Switch ......................................................................................................... 29
1.4 Good Habits for Managing the Switch ........................................................................................29
Chapter 2
Hardware Installation and Connection ...........................................................................................30
2.1 Safety Precautions .......................................................................................................................... 30
2.2 Freestanding Installation Procedure ............................................................................................ 30
2.3 Mounting the Switch on a Rack ................................................................................................... 31
2.3.1 Installation Requirements ..................................................................................................... 31
2.3.2 Precautions ............................................................................................................................ 31
2.3.3 Attaching the Mounting Brackets to the Switch ............................................................... 32
2.3.4 Mounting the Switch on a Rack .......................................................................................... 32
Chapter 3
Hardware Panels................................................................................................................................34
3.1 Front Panel Connections ............................................................................................................... 34
3.1.1 Ethernet Ports ......................................................................................................................... 35
3.1.2 SFP/SFP+ Slots ......................................................................................................................... 35
XGS4600 Series User’s Guide
6
Table of Contents
3.1.3 Dual Personality Interfaces .................................................................................................. 38
3.1.4 Management Port ................................................................................................................ 38
3.1.5 Console Port .......................................................................................................................... 38
3.2 Rear Panel ....................................................................................................................................... 38
3.2.1 Grounding .............................................................................................................................. 39
3.2.2 AC Power Connection (AC Models Only) ......................................................................... 41
3.2.3 DC Power Connection (DC Models Only) ......................................................................... 41
3.3 LEDs .................................................................................................................................................. 42
Part II: Technical Reference........................................................................... 44
Chapter 4
Web Configurator...............................................................................................................................45
4.1 Overview ......................................................................................................................................... 45
4.2 System Login .................................................................................................................................... 45
4.3 Zyxel One Network (ZON) Utility .................................................................................................... 48
4.3.1 Requirements ......................................................................................................................... 48
4.3.2 Run the ZON Utility ................................................................................................................. 48
4.4 Web Configurator Layout .............................................................................................................. 52
4.4.1 Change Your Password ........................................................................................................ 57
4.5 Save Your Configuration ................................................................................................................ 58
4.6 Switch Lockout ................................................................................................................................ 58
4.7 Reset the Switch ............................................................................................................................. 59
4.7.1 Reload the Configuration File .............................................................................................. 59
4.8 Log Out of the Web Configurator ................................................................................................ 60
4.9 Help .................................................................................................................................................. 60
Chapter 5
Initial Setup Example.........................................................................................................................61
5.1 Overview ......................................................................................................................................... 61
5.1.1 Create a VLAN ...................................................................................................................... 61
5.1.2 Set Port VID ............................................................................................................................ 62
5.1.3 Configure Switch Management IP Address ....................................................................... 63
Chapter 6
Tutorials...............................................................................................................................................65
6.1 Overview ......................................................................................................................................... 65
6.2 How to Use DHCPv4 Snooping on the Switch ............................................................................. 65
6.3 How to Use DHCPv4 Relay on the Switch .................................................................................... 69
6.3.1 DHCP Relay Tutorial Introduction ........................................................................................ 69
6.3.2 Create a VLAN ...................................................................................................................... 70
XGS4600 Series User’s Guide
7
Table of Contents
6.3.3 Configure DHCPv4 Relay ..................................................................................................... 72
6.3.4 Troubleshooting ..................................................................................................................... 73
6.4 How to Use Auto Configuration through a DHCP Server on the Switch .................................. 73
Chapter 7
Status...................................................................................................................................................77
7.1 Overview ......................................................................................................................................... 77
7.1.1 What You Can Do ................................................................................................................. 77
7.2 Status ................................................................................................................................................ 77
7.2.1 Neighbor Screen ................................................................................................................... 79
7.2.2 Neighbor Detail ..................................................................................................................... 80
Chapter 8
Basic Setting.......................................................................................................................................83
8.1 Overview ......................................................................................................................................... 83
8.1.1 What You Can Do ................................................................................................................. 83
8.2 System Information ......................................................................................................................... 83
8.2.1 System Information Stacking Hardware Monitor ............................................................... 86
8.3 General Setup ................................................................................................................................. 87
8.4 Introduction to VLANs .................................................................................................................... 89
8.5 Switch Setup .................................................................................................................................... 90
8.6 IP Setup ............................................................................................................................................ 92
8.6.1 IP Interfaces ........................................................................................................................... 92
8.6.2 IP Status .................................................................................................................................. 92
8.6.3 IP Status Details ...................................................................................................................... 93
8.6.4 IP Configuration .................................................................................................................... 94
8.7 Port Setup ........................................................................................................................................ 97
8.8 Interface Setup ............................................................................................................................... 99
8.9 IPv6 ................................................................................................................................................. 100
8.9.1 IPv6 Status ............................................................................................................................ 100
8.9.2 IPv6 Interface Status ........................................................................................................... 101
8.9.3 IPv6 Configuration .............................................................................................................. 103
8.9.4 IPv6 Global Setup ................................................................................................................ 104
8.9.5 IPv6 Interface Setup ............................................................................................................ 104
8.9.6 IPv6 Link-Local Address Setup ............................................................................................105
8.9.7 IPv6 Global Address Setup ................................................................................................. 106
8.9.8 IPv6 Neighbor Discovery Setup ......................................................................................... 107
8.9.9 IPv6 Router Discovery Setup ..............................................................................................108
8.9.10 IPv6 Prefix Setup ................................................................................................................ 110
8.9.11 IPv6 Neighbor Setup ......................................................................................................... 111
8.9.12 DHCPv6 Client Setup ........................................................................................................ 112
8.10 Loopback Interface ................................................................................................................... 114
8.10.1 IPv4 Loopback Interface .................................................................................................. 114
XGS4600 Series User’s Guide
8
Table of Contents
8.11 Stacking ....................................................................................................................................... 115
8.11.1 Stacking Status .................................................................................................................. 116
8.11.2 Stacking Slot ...................................................................................................................... 117
8.11.3 Stacking Configuration .................................................................................................... 118
Chapter 9
VLAN..................................................................................................................................................121
9.1 Overview ....................................................................................................................................... 121
9.1.1 What You Can Do ............................................................................................................... 121
9.1.2 What You Need to Know ................................................................................................... 121
9.2 Introduction to IEEE 802.1Q Tagged VLANs ............................................................................... 122
9.3 VLAN Status ................................................................................................................................... 124
9.3.1 VLAN Details ........................................................................................................................ 125
9.4 Private VLAN Status ...................................................................................................................... 126
9.5 VLAN Configuration ..................................................................................................................... 127
9.6 Configure a Static VLAN .............................................................................................................. 128
9.7 Configure VLAN Port Settings ...................................................................................................... 130
9.8 Subnet Based VLANs .................................................................................................................... 132
9.8.1 Configuring Subnet Based VLAN ....................................................................................... 133
9.9 Protocol Based VLANs .................................................................................................................. 135
9.9.1 Configuring Protocol Based VLAN .................................................................................... 135
9.10 Voice VLAN ................................................................................................................................. 138
9.11 MAC Based VLAN ....................................................................................................................... 140
9.12 Vendor ID Based VLAN .............................................................................................................. 141
9.13 Port-Based VLAN Setup .............................................................................................................. 143
9.13.1 Configure a Port-Based VLAN ......................................................................................... 143
Chapter 10
Static MAC Forwarding....................................................................................................................147
10.1 Overview ..................................................................................................................................... 147
10.1.1 What You Can Do ............................................................................................................. 147
10.2 Configure Static MAC Forwarding ...........................................................................................147
Chapter 11
Static Multicast Forwarding.............................................................................................................150
11.1 Overview ..................................................................................................................................... 150
11.1.1 What You Can Do ............................................................................................................. 150
11.1.2 What You Need To Know ................................................................................................. 150
11.2 Configure Static Multicast Forwarding .....................................................................................151
Chapter 12
Filtering..............................................................................................................................................153
12.1 Filtering Overview ....................................................................................................................... 153
XGS4600 Series User’s Guide
9
Table of Contents
12.1.1 What You Can Do ............................................................................................................. 153
12.2 Configure a Filtering Rule .......................................................................................................... 153
Chapter 13
Spanning Tree Protocol ...................................................................................................................155
13.1 Spanning Tree Protocol Overview ............................................................................................ 155
13.1.1 What You Can Do ............................................................................................................. 155
13.1.2 What You Need to Know ................................................................................................. 155
13.2 Spanning Tree Protocol Status .................................................................................................. 158
13.3 Spanning Tree Configuration .................................................................................................... 158
13.4 Rapid Spanning Tree Protocol Status .......................................................................................159
13.5 Configure Rapid Spanning Tree Protocol ................................................................................ 161
13.6 Configure Multiple Spanning Tree Protocol ............................................................................ 163
13.6.1 Multiple Spanning Tree Protocol Port Configuration ..................................................... 167
13.7 Multiple Spanning Tree Protocol Status ....................................................................................169
13.8 Configure Multiple Rapid Spanning Tree Protocol ................................................................. 173
13.9 Multiple Rapid Spanning Tree Protocol Status ........................................................................ 175
13.10 Technical Reference ................................................................................................................ 178
13.10.1 MSTP Network Example .................................................................................................. 178
13.10.2 MST Region ....................................................................................................................... 178
13.10.3 MST Instance .................................................................................................................... 179
13.10.4 Common and Internal Spanning Tree (CIST) ............................................................... 179
Chapter 14
Bandwidth Control...........................................................................................................................181
14.1 Bandwidth Control Overview .................................................................................................... 181
14.1.1 What You Can Do ............................................................................................................. 181
14.1.2 CIR and PIR ........................................................................................................................ 181
14.2 Bandwidth Control Setup .......................................................................................................... 181
Chapter 15
Broadcast Storm Control .................................................................................................................184
15.1 Broadcast Storm Control Overview ..........................................................................................184
15.1.1 What You Can Do ............................................................................................................. 184
15.2 Broadcast Storm Control Setup ................................................................................................ 184
Chapter 16
Mirroring............................................................................................................................................187
16.1 Mirroring Overview ..................................................................................................................... 187
16.1.1 Remote Port Mirroring ....................................................................................................... 191
16.1.2 Source ................................................................................................................................ 191
16.1.3 Destination ......................................................................................................................... 193
16.1.4 Connected Port ................................................................................................................ 195
XGS4600 Series User’s Guide
10
Table of Contents
Chapter 17
Link Aggregation .................................... .... .... ... ............................................ .... .... ..........................198
17.1 Link Aggregation Overview ....................................................................................................... 198
17.1.1 What You Can Do ............................................................................................................. 198
17.1.2 What You Need to Know ................................................................................................. 198
17.2 Link Aggregation Status ............................................................................................................. 199
17.3 Link Aggregation Setting ........................................................................................................... 200
17.3.1 Link Aggregation Control Protocol ................................................................................. 203
17.4 Technical Reference .................................................................................................................. 206
17.4.1 Static Trunking Example ................................................................................................... 206
Chapter 18
Port Authentication..........................................................................................................................208
18.1 Port Authentication Overview .................................................................................................. 208
18.1.1 What You Can Do ............................................................................................................. 208
18.1.2 What You Need to Know ................................................................................................. 209
18.1.3 MAC Authentication ........................................................................................................ 209
18.2 Port Authentication Configuration ........................................................................................... 210
18.3 Activate IEEE 802.1x Security ..................................................................................................... 210
18.4 Activate MAC Authentication .................................................................................................. 213
18.5 Guest VLAN ................................................................................................................................. 216
18.6 Compound Authentication ....................................................................................................... 219
18.7 Technical Reference .................................................................................................................. 222
18.7.1 IEEE 802.1x .......................................................................................................................... 222
18.7.2 RADIUS ................................................................................................................................ 222
18.7.3 EAP (Extensible Authentication Protocol) Authentication ........................................... 223
18.7.4 EAPOL (EAP over LAN) ...................................................................................................... 224
Chapter 19
Port Security......................................................................................................................................225
19.1 About Port Security ..................................................................................................................... 225
19.2 Port Security Setup ...................................................................................................................... 225
19.3 VLAN MAC Address Limit ........................................................................................................... 227
Chapter 20
Time Range.......................................................................................................................................229
20.1 Time Range Overview ................................................................................................................ 229
20.1.1 What You Can Do ............................................................................................................. 229
20.2 Configuring Time Range ............................................................................................................ 229
Chapter 21
Classifier............................................................................................................................................231
21.1 Classifier Overview ..................................................................................................................... 231
XGS4600 Series User’s Guide
11
Table of Contents
21.1.1 What You Can Do ............................................................................................................. 231
21.1.2 What You Need to Know ................................................................................................. 231
21.2 Classifier Status ............................................................................................................................ 232
21.3 Classifier Configuration .............................................................................................................. 232
21.3.1 Viewing and Editing Classifier Configuration Summary ............................................... 236
21.4 Classifier Global Setting Configuration .................................................................................... 237
21.5 Classifier Example ....................................................................................................................... 238
Chapter 22
Policy Rule ........................................................................................................................................240
22.1 Policy Rules Overview ................................................................................................................ 240
22.1.1 What You Can Do ............................................................................................................. 240
22.1.2 DiffServ ................................................................................................................................ 240
22.1.3 DSCP and Per-Hop Behavior ........................................................................................... 240
22.2 Configuring Policy Rules ............................................................................................................ 241
22.3 Policy Example ............................................................................................................................ 243
Chapter 23
Queuing Method..............................................................................................................................245
23.1 Queuing Method Overview ...................................................................................................... 245
23.1.1 What You Can Do ............................................................................................................. 245
23.1.2 What You Need to Know ................................................................................................. 245
23.2 Configuring Queuing ................................................................................................................. 246
Chapter 24
VLAN Stacking..................................................................................................................................249
24.1 VLAN Stacking Overview ........................................................................................................... 249
24.1.1 VLAN Stacking Example ...................................................................................................249
24.2 VLAN Stacking Port Roles ........................................................................................................... 250
24.3 VLAN Tag Format ........................................................................................................................ 250
24.3.1 Frame Format .................................................................................................................... 251
24.4 Configuring VLAN Stacking ....................................................................................................... 251
24.4.1 Port-based Q-in-Q ............................................................................................................. 253
24.4.2 Selective Q-in-Q ................................................................................................................ 255
Chapter 25
Multicast............................................................................................................................................257
25.1 Multicast Overview ..................................................................................................................... 257
25.1.1 What You Can Do ............................................................................................................. 257
25.1.2 What You Need to Know ................................................................................................. 258
25.2 Multicast Setup ........................................................................................................................... 261
25.3 IPv4 Multicast Status ................................................................................................................... 261
25.3.1 IGMP Snooping .................................................................................................................. 262
XGS4600 Series User’s Guide
12
Table of Contents
25.3.2 IGMP Snooping VLAN ....................................................................................................... 266
25.3.3 IGMP Filtering Profile ......................................................................................................... 267
25.4 IPv6 Multicast Status ................................................................................................................... 268
25.4.1 MLD Snooping-proxy ........................................................................................................ 268
25.4.2 MLD Snooping-proxy VLAN .............................................................................................. 269
25.4.3 MLD Snooping-proxy VLAN Port Role Setting ................................................................. 271
25.4.4 MLD Snooping-proxy Filtering .......................................................................................... 273
25.4.5 MLD Snooping-proxy Filtering Profile ............................................................................... 275
25.5 General MVR Configuration ...................................................................................................... 276
25.5.1 MVR Group Configuration ............................................................................................... 279
25.5.2 MVR Configuration Example ........................................................................................... 281
Chapter 26
AAA...................................................................................................................................................283
26.1 Authentication, Authorization and Accounting (AAA) ......................................................... 283
26.1.1 What You Can Do ............................................................................................................. 283
26.1.2 What You Need to Know ................................................................................................. 283
26.2 AAA Screens ............................................................................................................................... 284
26.3 RADIUS Server Setup ................................................................................................................... 285
26.4 TACACS+ Server Setup ............................................................................................................... 286
26.5 AAA Setup ................................................................................................................................... 288
26.6 Technical Reference .................................................................................................................. 290
26.6.1 Vendor Specific Attribute ................................................................................................ 290
26.6.2 Supported RADIUS Attributes ........................................................................................... 292
26.6.3 Attributes Used for Authentication .................................................................................. 292
26.6.4 Attributes Used for Accounting ....................................................................................... 293
Chapter 27
IP Source Guard...............................................................................................................................296
27.1 IP Source Guard Overview ........................................................................................................ 296
27.1.1 What You Can Do ............................................................................................................. 296
27.1.2 What You Need to Know ................................................................................................. 296
27.2 IP Source Guard .......................................................................................................................... 297
27.3 IPv4 Source Guard Setup ........................................................................................................... 297
27.4 IPv4 Source Guard Static Binding ............................................................................................. 298
Chapter 28
DHCP Snooping................................................................................................................................301
28.1 DHCP Snooping Overview ......................................................................................................... 301
28.1.1 What You Can Do ............................................................................................................. 301
28.2 DHCP Snooping .......................................................................................................................... 301
28.3 DHCP Snooping Configure ........................................................................................................ 304
28.3.1 DHCP Snooping Port Configure ...................................................................................... 306
XGS4600 Series User’s Guide
13
Table of Contents
28.3.2 DHCP Snooping VLAN Configure .................................................................................... 308
28.3.3 DHCP Snooping VLAN Port Configure ............................................................................ 309
28.4 Technical Reference .................................................................................................................. 310
28.4.1 DHCP Snooping Overview ............................................................................................... 310
Chapter 29
ARP Inspection .................................................................................................................................312
29.1 ARP Inspection Status ................................................................................................................. 312
29.1.1 ARP Inspection VLAN Status ............................................................................................. 313
29.1.2 ARP Inspection Log Status ................................................................................................ 313
29.2 ARP Inspection Configure .......................................................................................................... 314
29.2.1 ARP Inspection Port Configure ........................................................................................ 316
29.2.2 ARP Inspection VLAN Configure ..................................................................................... 317
29.3 IPv6 Source Guard Overview .................................................................................................... 318
29.4 IPv6 Source Binding Status ......................................................................................................... 319
29.5 IPv6 Static Binding Setup ........................................................................................................... 320
29.6 IPv6 Source Guard Policy Setup ............................................................................................... 322
29.7 IPv6 Source Guard Port Setup ................................................................................................... 323
29.8 IPv6 Snooping Policy Setup ....................................................................................................... 324
29.9 IPv6 Snooping VLAN Setup ........................................................................................................ 325
29.10 IPv6 DHCP Trust Setup .............................................................................................................. 326
29.11 Technical Reference ................................................................................................................ 328
29.11.1 ARP Inspection Overview ............................................................................................... 328
Chapter 30
Loop Guard ......................................................................................................................................330
30.1 Loop Guard Overview ............................................................................................................... 330
30.1.1 What You Can Do ............................................................................................................. 330
30.1.2 What You Need to Know ................................................................................................. 330
30.2 Loop Guard Setup ...................................................................................................................... 332
Chapter 31
VLAN Mapping.................................................................................................................................334
31.1 VLAN Mapping Overview .......................................................................................................... 334
31.1.1 VLAN Mapping Example .................................................................................................. 334
31.1.2 What You Can Do ............................................................................................................. 335
31.2 Enable VLAN Mapping .............................................................................................................. 335
31.2.1 VLAN Mapping Configure ............................................................................................... 336
Chapter 32
Layer 2 Protocol Tunneling..............................................................................................................338
32.1 Layer 2 Protocol Tunneling Overview .......................................................................................338
32.1.1 What You Can Do ............................................................................................................. 338
XGS4600 Series User’s Guide
14
Table of Contents
32.1.2 What You Need to Know ................................................................................................. 338
32.2 Configuring Layer 2 Protocol Tunneling ................................................................................... 339
Chapter 33
sFlow..................................................................................................................................................343
33.1 sFlow Overview ........................................................................................................................... 343
33.2 sFlow Port Configuration ............................................................................................................ 343
33.2.1 sFlow Collector Configuration ......................................................................................... 345
Chapter 34
PPPoE.................................................................................................................................................347
34.1 PPPoE Intermediate Agent Overview ...................................................................................... 347
34.1.1 What You Can Do ............................................................................................................. 347
34.1.2 What You Need to Know ................................................................................................. 347
34.2 PPPoE ........................................................................................................................................... 349
34.3 PPPoE Intermediate Agent ........................................................................................................ 350
34.3.1 PPPoE IA Per-Port ............................................................................................................... 351
34.3.2 PPPoE IA Per-Port Per-VLAN ............................................................................................. 353
34.3.3 PPPoE IA for VLAN ............................................................................................................. 354
Chapter 35
Error-Disable.....................................................................................................................................356
35.1 Error-Disable Overview ............................................................................................................... 356
35.1.1 CPU Protection Overview ................................................................................................ 356
35.1.2 Error-Disable Recovery Overview .................................................................................... 356
35.1.3 What You Can Do ............................................................................................................. 356
35.2 Error-Disable Settings .................................................................................................................. 357
35.3 Error-Disable Status ..................................................................................................................... 357
35.4 CPU Protection Configuration ................................................................................................... 359
35.5 Error-Disable Detect Configuration .......................................................................................... 361
35.6 Error-Disable Recovery Configuration ......................................................................................362
Chapter 36
VLAN Isolation..................................................................................................................................363
36.1 VLAN Isolation Overview ............................................................................................................ 363
36.2 Configuring VLAN Isolation ........................................................................................................ 363
Chapter 37
MAC Pinning.....................................................................................................................................365
37.1 MAC Pinning Overview .............................................................................................................. 365
37.2 MAC Pinning Configuration ...................................................................................................... 365
Chapter 38
Private VLAN........... .... ... .... .... ............................................ .... ... .... ....................................................368
XGS4600 Series User’s Guide
15
Table of Contents
38.1 Private VLAN Overview .............................................................................................................. 368
38.1.1 Configuration .................................................................................................................... 369
Chapter 39
Green Ethernet.................................................................. .... ...........................................................372
39.1 Green Ethernet Overview .......................................................................................................... 372
39.2 Configuring Green Ethernet ...................................................................................................... 372
Chapter 40
Link Layer Discovery Protocol (LLDP) .............................................................................................375
40.1 LLDP Overview ............................................................................................................................ 375
40.2 LLDP-MED Overview ................................................................................................................... 376
40.3 LLDP Settings ............................................................................................................................... 377
40.4 LLDP Local Status ........................................................................................................................ 378
40.4.1 LLDP Local Port Status Detail ...........................................................................................380
40.5 LLDP Remote Status .................................................................................................................... 383
40.5.1 LLDP Remote Port Status Detail ....................................................................................... 384
40.6 LLDP Configuration ..................................................................................................................... 390
40.6.1 LLDP Configuration Basic TLV Setting .............................................................................. 392
40.6.2 LLDP Configuration Org-specific TLV Setting ................................................................. 393
40.7 LLDP-MED Configuration ............................................................................................................ 395
40.8 LLDP-MED Network Policy .......................................................................................................... 396
40.9 LLDP-MED Location .................................................................................................................... 398
Chapter 41
Anti-Arpscan ....................................................................................................................................403
41.1 Anti-Arpscan Overview .............................................................................................................. 403
41.1.1 What You Can Do ............................................................................................................. 403
41.1.2 What You Need to Know ................................................................................................. 403
41.2 Anti-Arpscan Status .................................................................................................................... 404
41.3 Anti-Arpscan Host Status ............................................................................................................ 405
41.4 Anti-Arpscan Trust Host .............................................................................................................. 406
41.5 Anti-Arpscan Configure ............................................................................................................. 406
Chapter 42
BPDU Guard......................................................................................................................................409
42.1 BPDU Guard Overview ............................................................................................................... 409
42.1.1 What You Can Do ............................................................................................................. 409
42.2 BPDU Guard Status ..................................................................................................................... 409
42.3 BPDU Guard Configuration ....................................................................................................... 410
Chapter 43
OAM..................................................................................................................................................413
XGS4600 Series User’s Guide
16
Table of Contents
43.1 OAM Overview ........................................................................................................................... 413
43.1.1 What You Can Do ............................................................................................................. 413
43.2 OAM Status .................................................................................................................................. 413
43.2.1 OAM Details ....................................................................................................................... 415
43.3 OAM Configuration .................................................................................................................... 418
43.4 OAM Remote Loopback ........................................................................................................... 420
Chapter 44
ZULD...................................................................................................................................................422
44.1 ZULD Overview ............................................................................................................................ 422
44.1.1 What You Can Do ............................................................................................................. 422
44.1.2 What You Need to Know ................................................................................................. 422
44.2 ZULD Status .................................................................................................................................. 423
44.3 ZULD Configuration .................................................................................................................... 425
Chapter 45
NLB.....................................................................................................................................................428
45.1 NLB Overview .............................................................................................................................. 428
45.1.1 What You Can Do ............................................................................................................. 428
45.1.2 What You Need to Know ................................................................................................. 429
45.2 MAC Forwarding ........................................................................................................................ 429
45.3 IP Configuration .......................................................................................................................... 431
Chapter 46
Wol Relay..........................................................................................................................................433
46.1 Wol Relay Overview ................................................................................................................... 433
46.2 Wol Relay ..................................................................................................................................... 433
Chapter 47
Static Route.......................................................................................................................................435
47.1 Static Routing Overview ............................................................................................................ 435
47.1.1 What You Can Do ............................................................................................................. 435
47.2 Static Routing .............................................................................................................................. 436
47.3 IPv4 Static Route ......................................................................................................................... 436
47.4 IPv6 Static Route ......................................................................................................................... 437
Chapter 48
Policy Routing...................................................................................................................................439
48.1 Policy Route Overview ............................................................................................................... 439
48.1.1 Benefits ............................................................................................................................... 439
48.2 Configuring Policy Routing Profile ............................................................................................. 439
48.2.1 Policy Routing Rule Configuration .................................................................................. 440
XGS4600 Series User’s Guide
17
Table of Contents
Chapter 49
RIP......................................................................................................................................................443
49.1 RIP Overview ............................................................................................................................... 443
49.1.1 Administrative Distance ................................................................................................... 443
49.2 Configuring IPv4 RIP ................................................................................................................... 444
49.3 Configuring IPv6 RIP .................................................................................................................. 446
Chapter 50
OSPF ..................................................................................................................................................448
50.1 OSPF Overview ............................................................................................................................ 448
50.1.1 OSPF Autonomous Systems and Areas ........................................................................... 448
50.1.2 How OSPF Works ................................................................................................................ 449
50.1.3 Interfaces and Virtual Links .............................................................................................. 449
50.1.4 OSPF and Router Elections ...............................................................................................449
50.1.5 Configuring OSPF .............................................................................................................. 450
50.2 OSPF Screen ................................................................................................................................ 450
50.3 IPv4 OSPF Status .......................................................................................................................... 451
50.4 IPv4 OSPF Configuration ............................................................................................................ 453
50.5 Configure IPv4 OSPF Areas ........................................................................................................ 454
50.5.1 View OSPF Area Information Table ................................................................................. 456
50.6 Configuring IPv4 OSPF Redistribution ....................................................................................... 456
50.7 Configuring IPv4 OSPF Interfaces ............................................................................................. 458
50.8 IPv4 OSPF Virtual-Links ................................................................................................................ 460
50.9 IPv6 OSPF Status ......................................................................................................................... 462
50.10 IPv6 OSPF Configuration ......................................................................................................... 464
50.11 IPv6 OSPF Redistribution .......................................................................................................... 465
50.12 IPv6 OSPF Interfaces ................................................................................................................ 466
50.13 IPv6 OSPF Virtual-Links ............................................................................................................ 467
Chapter 51
IGMP..................................................................................................................................................470
51.1 IGMP Overview ........................................................................................................................... 470
51.1.1 How IGMP Works ............................................................................................................... 471
51.2 Port-based IGMP ........................................................................................................................ 472
51.3 Configuring IGMP ....................................................................................................................... 472
Chapter 52
DVMRP...............................................................................................................................................474
52.1 DVMRP Overview ....................................................................................................................... 474
52.2 How DVMRP Works ..................................................................................................................... 474
52.2.1 DVMRP Terminology .......................................................................................................... 475
52.3 Configuring DVMRP .................................................................................................................... 475
52.3.1 DVMRP Configuration Error Messages ............................................................................ 476
XGS4600 Series User’s Guide
18
Table of Contents
52.4 Default DVMRP Timer Values ..................................................................................................... 477
Chapter 53
Differentiated Services ....................................................................................................................478
53.1 DiffServ Overview ....................................................................................................................... 478
53.1.1 What You Can Do ............................................................................................................. 478
53.1.2 What You Need to Know ................................................................................................. 478
53.2 Activating DiffServ ...................................................................................................................... 479
53.3 DSCP-to-IEEE 802.1p Priority Settings ......................................................................................... 481
53.3.1 Configuring DSCP Settings ...............................................................................................481
Chapter 54
DHCP .................................................................................................................................................482
54.1 DHCP Overview .......................................................................................................................... 482
54.1.1 What You Can Do ............................................................................................................. 482
54.1.2 What You Need to Know ................................................................................................. 483
54.2 DHCP Configuration ................................................................................................................... 483
54.3 DHCPv4 Status ............................................................................................................................ 484
54.3.1 DHCPv4 Server Status Detail ............................................................................................ 484
54.4 DHCPv4 Relay ............................................................................................................................. 485
54.4.1 DHCPv4 Relay Agent Information ................................................................................... 486
54.4.2 DHCPv4 Option 82 Profile ................................................................................................. 487
54.4.3 Configuring DHCPv4 Global Relay ................................................................................. 488
54.4.4 Configure DHCPv4 Global Relay Port ............................................................................ 489
54.4.5 Global DHCP Relay Configuration Example .................................................................. 490
54.4.6 DHCPv4 VLAN Setting ....................................................................................................... 491
54.4.7 Configure DHCPv4 VLAN Port ......................................................................................... 492
54.4.8 Example: DHCP Relay for Two VLANs ............................................................................. 494
54.5 DHCPv6 Status ............................................................................................................................ 495
54.6 DHCPv6 Information ................................................................................................................... 495
54.7 DHCPv6 Prefix Delegation ......................................................................................................... 496
54.8 DHCPv6 Relay ............................................................................................................................. 498
54.9 DHCP Server Guard .................................................................................................................... 499
Chapter 55
VRRP ..................................................................................................................................................501
55.1 VRRP Overview ........................................................................................................................... 501
55.2 VRRP Status .................................................................................................................................. 502
55.3 VRRP Configuration .................................................................................................................... 502
55.3.1 IP Interface Setup .............................................................................................................. 502
55.3.2 VRRP Parameters .............................................................................................................. 503
55.3.3 Configuring VRRP Parameters ......................................................................................... 504
55.3.4 Viewing VRRP Summary ................................................................................................... 505
XGS4600 Series User’s Guide
19
Table of Contents
55.4 VRRP Configuration Examples .................................................................................................. 506
55.4.1 One Subnet Network Example ........................................................................................ 506
55.4.2 Two Subnets Example ....................................................................................................... 507
Chapter 56
Router Setup .....................................................................................................................................510
56.1 Router Setup Overview .............................................................................................................. 510
56.2 Configuring Router Setup .......................................................................................................... 510
Chapter 57
ARP Setup..........................................................................................................................................512
57.1 ARP Overview ............................................................................................................................. 512
57.1.1 What You Can Do ............................................................................................................. 512
57.1.2 What You Need to Know ................................................................................................. 512
57.2 ARP Setup .................................................................................................................................... 514
57.2.1 ARP Learning ..................................................................................................................... 514
57.2.2 Static ARP ........................................................................................................................... 516
Chapter 58
Maintenance....................................................................................................................................518
58.1 Overview ..................................................................................................................................... 518
58.1.1 What You Can Do ............................................................................................................. 518
58.2 Maintenance Settings ................................................................................................................ 518
58.2.1 Erase Running-Configuration ........................................................................................... 520
58.2.2 Save Configuration ........................................................................................................... 520
58.2.3 Reboot System .................................................................................................................. 521
58.2.4 Stacking Default ................................................................................................................ 521
58.2.5 Factory Default .................................................................................................................. 522
58.2.6 Custom Default ................................................................................................................. 522
58.3 Firmware Upgrade ...................................................................................................................... 523
58.4 Restore Configuration ................................................................................................................ 525
58.5 Backup Configuration ................................................................................................................ 525
58.6 Auto Configuration .................................................................................................................... 526
58.7 Tech-Support ............................................................................................................................... 527
58.7.1 Tech-Support Download .................................................................................................. 529
58.8 Certificates .................................................................................................................................. 529
58.8.1 HTTPS Certificates .............................................................................................................. 531
58.9 Technical Reference .................................................................................................................. 532
58.9.1 FTP Command Line ........................................................................................................... 532
58.9.2 Filename Conventions ...................................................................................................... 532
58.9.3 FTP Command Line Procedure ........................................................................................ 533
58.9.4 GUI-based FTP Clients ....................................................................................................... 533
58.9.5 FTP Restrictions ................................................................................................................... 533
XGS4600 Series User’s Guide
20
Table of Contents
Chapter 59
Access Control.................................................................................................................................535
59.1 Access Control Overview .......................................................................................................... 535
59.1.1 What You Can Do ............................................................................................................. 535
59.2 Access Control Main Settings .................................................................................................... 535
59.3 Configure SNMP .......................................................................................................................... 536
59.3.1 Configure SNMP Trap Group ........................................................................................... 537
59.3.2 Enable or Disable Sending of SNMP Traps on a Port ..................................................... 538
59.3.3 Configure SNMP User ........................................................................................................ 540
59.4 Set Up Login Accounts ............................................................................................................... 542
59.5 Service Access Control .............................................................................................................. 543
59.6 Remote Management ............................................................................................................... 544
59.7 Technical Reference .................................................................................................................. 545
59.7.1 About SNMP ....................................................................................................................... 546
59.7.2 SSH Overview ..................................................................................................................... 552
59.7.3 Introduction to HTTPS ........................................................................................................ 554
59.7.4 Google Chrome Warning Messages .............................................................................. 558
Chapter 60
Diagnostic.........................................................................................................................................560
60.1 Overview ..................................................................................................................................... 560
60.2 Diagnostic ................................................................................................................................... 560
Chapter 61
System Log........................................................................................................................................564
61.1 Overview ..................................................................................................................................... 564
61.2 System Log .................................................................................................................................. 564
Chapter 62
Syslog Setup .....................................................................................................................................565
62.1 Syslog Overview .......................................................................................................................... 565
62.1.1 What You Can Do ............................................................................................................. 565
62.2 Syslog Setup ................................................................................................................................ 565
Chapter 63
Cluster Management.......................................................................................................................568
63.1 Cluster Management Overview ...............................................................................................568
63.1.1 What You Can Do ............................................................................................................. 569
63.2 Cluster Management Status ..................................................................................................... 569
63.3 Clustering Management Configuration .................................................................................. 570
63.4 Technical Reference .................................................................................................................. 571
63.4.1 Cluster Member Switch Management ........................................................................... 571
XGS4600 Series User’s Guide
21
Table of Contents
Chapter 64
MAC Table........................................................................................................................................574
64.1 MAC Table Overview ................................................................................................................. 574
64.1.1 What You Can Do ............................................................................................................. 574
64.1.2 What You Need to Know ................................................................................................. 574
64.2 Viewing the MAC Table ............................................................................................................. 575
Chapter 65
IP Table..............................................................................................................................................577
65.1 IP Table Overview ....................................................................................................................... 577
65.2 Viewing the IP Table ................................................................................................................... 578
Chapter 66
ARP Table..........................................................................................................................................579
66.1 Overview ..................................................................................................................................... 579
66.1.1 What You Can Do ............................................................................................................. 579
66.1.2 What You Need to Know ................................................................................................. 579
66.2 Viewing the ARP Table ............................................................................................................... 579
Chapter 67
Routing Table....................................................................................................................................581
67.1 Routing Table Overview ............................................................................................................ 581
67.2 The Routing Table Main Screen ................................................................................................ 581
67.3 IPv4 Routing Table ...................................................................................................................... 581
67.4 IPv6 Routing Table ...................................................................................................................... 582
Chapter 68
Path MTU Table.................................................................................................................................584
68.1 Path MTU Overview .................................................................................................................... 584
68.2 Viewing the Path MTU Table ..................................................................................................... 584
Chapter 69
Configure Clone.................... .... ... ............................................ .... .... ... .... .........................................585
69.1 Overview ..................................................................................................................................... 585
69.2 Configure Clone ......................................................................................................................... 585
Chapter 70
IPv6 Neighbor Table.........................................................................................................................589
70.1 IPv6 Neighbor Table Overview .................................................................................................. 589
70.2 Viewing the IPv6 Neighbor Table ............................................................................................. 589
Chapter 71
Port Status .........................................................................................................................................591
XGS4600 Series User’s Guide
22
Table of Contents
71.1 Overview ..................................................................................................................................... 591
71.2 Status ............................................................................................................................................ 591
71.3 Port Status .................................................................................................................................... 591
71.3.1 Port Details ......................................................................................................................... 593
71.3.2 DDMI ................................................................................................................................... 597
71.3.3 DDMI Details ...................................................................................................................... 598
71.3.4 Port Utilization .................................................................................................................... 600
Chapter 72
Service Register................................................................................................................................602
72.1 Service Register Overview ......................................................................................................... 602
72.2 Service Register Screen ............................................................................................................. 602
Part III: Troubleshooting and Appendices..................................................604
Chapter 73
Troubleshooting................................................................................................................................605
73.1 Power, Hardware Connections, and LEDs ............................................................................... 605
73.2 Switch Access and Login ........................................................................................................... 606
73.3 Switch Configuration .................................................................................................................. 607
Appendix A Customer Support ..................................................................................................... 609
Appendix B Common Services...................................................................................................... 615
Appendix C IPv6.............................................................................................................................. 618
Appendix D Legal Information ...................................................................................................... 627
Index.................................................................................................................................................632
XGS4600 Series User’s Guide
23
PART I
User’s Guide
24
CHAPTER 1
Getting to Know Your Switch
1.1 Introduction
This chapter introduces the main features and applications of the Switch.
Your Switch is a stackable, layer-3, Gigabit Ethernet (GbE) switch with two power slots for dual power
supply modules. The Switch comes with four GbE dual personality interfaces. A dual personality interface
includes one Gigabit port and one slot for a SFP module with one port active at a time. The Switch
provides four SFP+ slots for uplink. The last two SFP+ slots can also be used for stacking. When working in
stacking mode, the Switch can operate together with other XGS4600 stackable switches and allows you
to remotely manage them from one switch using one single IP address. By integrating router functions,
the Switch performs wire-speed layer-3 routing in addition to layer-2 switching.
This User’s Guide covers the following models: XGS4600-32, XGS4600-32F and XGS4600-52F.
Table 1 Switch Comparison Table
FEATURES XGS4600-32 XGS4600-32F XGS4600-52F
Stacking Mode
24 10/100/1000Base-T Ethernet
ports
24 SFP slots
48 SFP slots
4 GbE Combo ports (Dual
Personality Interfaces)
4 10GbE SFP+ slots
See the datasheet for a full list of software features available on the Switch.
1.1.1 License Option
At the time of writing, the following Switch license is available for purchase. The following table shows
the features supported for the new license.
Table 2 Switch License
LICENSE NAME UNLOCKED SERVICES STACKING MODE SUPPORT
Advance Routing License • RIPng (IPv6)
1.1.2 Stacking Mode
The Switch can work in stacking mode and directly connect to other switches. The switches then
operate together and act as a single switch or a virtual chassis. The stackable switches can be
managed from a master switch in the stack.
No
• OSPFv3 (IPv6)
XGS4600 Series User’s Guide
25
Note: To set the Switch to stacking mode, go to the Basic Setting > Stacking > Configuration
screen.
Note: When the Switch is in stacking mode, it uses the default static IP address 192.168.1.1.
Figure 1 Stacking Example
1.1.3 ZON Utility
With its built-in Web Configurator, including the Neighbor Management feature (Section 7.2.1 on page
79), viewing, managing and configuring the Switch and its neighboring devices is simplified.
In addition, Zyxel offers a proprietary software program called Zyxel One Network (ZON) Utility, it is a
utility tool that assists you to set up and maintain network devices in a more simple and efficient way.
You can download the ZON Utility at www.zyxel.com and install it on a PC (Windows operation system).
For more information on ZON Utility see Section 4.3 on page 48.
Chapter 1 Getting to Know Your Switch
1.2 Example Applications
This section shows a few examples of using the Switch in various network environments. Note that the
Switch in the figure is just an example Switch and not your actual Switch.
1.2.1 Bridging or Fiber Uplink Example Application
In this example, the Switch connects different company departments (RD and Sales) to the corporate
backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All
users that need high bandwidth can connect to high-speed department servers through the Switch.
You can provide a super-fast uplink connection by using a Gigabit Ethernet or SFP port on the Switch.
Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize
multiple servers at a single location.
XGS4600 Series User’s Guide
26
Chapter 1 Getting to Know Your Switch
Figure 2 Bridging Application
1.2.2 High Performance Switching Example
The Switch is ideal for connecting two geographically dispersed networks that need high bandwidth. In
the following example, a company uses the 10 Gigabit uplink ports to connect the headquarters to a
branch office network. Within the headquarters network, a company can use trunking to group several
physical ports into one logical higher-capacity link. Trunking can be used if for example, it is cheaper to
use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link.
Figure 3 High Performance Switching
1.2.3 Gigabit Ethernet to the Desktop
The Switch is an ideal solution for small networks which demand high bandwidth for a group of heavy
traffic users. You can connect computers and servers directly to the Switch’s port or connect other
switches to the Switch. Use the 10 Gigabit uplink ports to provide high speed access to a data server
and the Internet. The uplink ports support a fiber-optic connection which alleviates the distance
limitations of copper cabling.
XGS4600 Series User’s Guide
27
Chapter 1 Getting to Know Your Switch
In this example, all computers can share high-speed applications on the server and access the Internet.
To expand the network, simply add more networking devices such as switches, routers, computers, print
servers and so on.
Figure 4 Gigabit to the Desktop
1.2.4 IEEE 802.1Q VLAN Application Examples
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical
networks. Stations on a logical network belong to one or more groups. With VLAN, a station cannot
directly talk to or hear from stations that are not in the same groups unless such traffic first goes through
a router.
1.2.4.1 Tag-based VLAN Example
Ports in the same VLAN group share the same frame broadcast domain thus increase network
performance through reduced broadcast traffic. VLAN groups can be modified at any time by adding,
moving or changing ports without any re-cabling.
Shared resources such as a server can be used by all ports in the same VLAN as the server. In the
following figure only ports that need access to the server need to be part of VLAN 1. Ports can belong to
other VLAN groups too.
Figure 5 Shared Server Using VLAN Example
XGS4600 Series User’s Guide
28
1.2.5 IPv6 Support
Chapter 1 Getting to Know Your Switch
IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in
IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10
of writing, the Switch supports the following features.
• Static address assignment and stateless auto-configuration
• Neighbor Discovery Protocol (a protocol used to discover other IPv6 devices in a network)
• Remote Management using ping SNMP, SSH, telnet, HTTP and FTP services
• ICMPv6 to report errors encountered in packet processing and perform diagnostic functions, such as
"ping”
• IPv4/IPv6 dual stack; the Switch can run IPv4 and IPv6 at the same time
• DHCPv6 client and relay
• Multicast Listener Discovery (MLD) snooping and proxy
For more information on IPv6, refer to Appendix C on page 618 and the CLI Reference Guide.
1.3 Ways to Manage the Switch
Use any of the following methods to manage the Switch.
• Web Configurator. This is recommended for everyday management of the Switch using a (supported)
web browser. See Chapter 4 on page 45.
• Command Line Interface. Line commands offer an alternative to the Web Configurator and in some
cases are necessary to configure advanced features. See the CLI Reference Guide.
• FTP. Use File Transfer Protocol for firmware upgrades and configuration backup or restore. See Section
58.9.1 on page 532.
• SNMP. The Switch can be monitored and/or managed by an SNMP manager. See Section 59.7.1 on
page 546.
• Cluster Management. Cluster Management allows you to manage multiple switches through one
switch, called the cluster manager. See Chapter 63 on page 568.
• ZON Utility. ZON Utility is a program designed to help you deploy and perform initial setup on a
network more efficiently. See Section 4.3 on page 48.
38
IP addresses. At the time
1.4 Good Habits for Managing the Switch
Do the following regularly to make the Switch more secure and to manage the Switch more effectively.
• Change the password. Use a password that is not easy to guess and that consists of different types of
characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you forget your
password, you will have to reset the Switch to its factory default settings. If you backed up an earlier
configuration file, you would not have to totally re-configure the Switch. You could simply restore your
last configuration.
XGS4600 Series User’s Guide
29
Hardware Installation and
This chapter shows you how to install and connect the Switch.
The Switch can be:
• Placed on a desktop.
• Rack-mounted on a standard EIA rack.
2.1 Safety Precautions
CHAPTER 2
Connection
Please observe the following before using the Switch:
• It is recommended to ask an authorized technician to attach the Switch on a desk or to the rack or
wall. Use the proper screws to prevent damage to the Switch. See the Installation Requirements
sections in this chapter to know the types of screws and screwdrivers for each mounting method.
• Make sure there is at least 2 cm of clearance on the top and bottom of the Switch, and at least 5 cm
of clearance on all four sides of the Switch. This allows air circulation for cooling.
• Do NOT block the ventilation holes nor store cables or power cords on the Switch. Allow clearance for
the ventilation holes to prevent your Switch from overheating. This is especially crucial when your
Switch does not have fans. Overheating could affect the performance of your Switch, or even
damage it.
• The surface of the Switch could be hot when it is functioning. Do NOT put your hands on it. You may
get burned. This could happen especially when you are using a fanless Switch.
• The Switches with fans are not suitable for use in locations where children are likely to be present.
To start using the Switch, simply connect the power cables and turn it on.
2.2 Freestanding Installation Procedure
1 Make sure the Switch is clean and dry.
2 Remove the adhesive backing from the rubber feet.
3 Attach the rubber feet to each corner on the bottom of the Switch. These rubber feet help protect the
Switch from shock or vibration and ensure space between devices when stacking.
XGS4600 Series User’s Guide
30
Chapter 2 Hardware Installation and Connection
Figure 6 Attaching Rubber Feet
4 Set the Switch on a smooth, level surface strong enough to support the weight of the Switch and the
connected cables. Make sure there is a power outlet nearby.
Cautions:
• Avoid stacking fanless Switches to prevent overheating.
• Ensure enough clearance around the Switch to allow air circulation for cooling.
• Do NOT remove the rubber feet as it provides space for air circulation.
2.3 Mounting the Switch on a Rack
The Switch can be mounted on an EIA standard size, 19-inch rack or in a wiring closet with other
equipment. Follow the steps below to mount your Switch on a standard EIA rack using a rack-mounting
kit.
Note: Make sure there is enough clearance between each equipment on the rack for air
circulation.
2.3.1 Installation Requirements
• Two mounting brackets.
• Eight M3 flat head screws and a #2 Philips screwdriver.
• Four M5 flat head screws and a #2 Philips screwdriver.
2.3.2 Precautions
• Make sure the rack will safely support the combined weight of all the equipment it contains. The
maximum weight a bracket can hold is 21.5 kg.
• Make sure the position of the Switch does not make the rack unstable or top-heavy. Take all
necessary precautions to anchor the rack securely before installing the unit.
XGS4600 Series User’s Guide
31
Chapter 2 Hardware Installation and Connection
2.3.3 Attaching the Mounting Brackets to the Switch
1 Position a mounting bracket on one side of the Switch, lining up the four screw holes on the bracket with
the screw holes on the side of the Switch.
Figure 7 Attaching the Mounting Brackets
2 Using a #2 Philips screwdriver, install the M3 flat head screws through the mounting bracket holes into
the Switch.
3 Repeat steps 1 and 2 to install the second mounting bracket on the other side of the Switch.
4 You may now mount the Switch on a rack. Proceed to the next section.
2.3.4 Mounting the Switch on a Rack
1 Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up
the two screw holes on the bracket with the screw holes on the side of the rack.
Figure 8 Mounting the Switch on a Rack
XGS4600 Series User’s Guide
32
Chapter 2 Hardware Installation and Connection
2 Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into
the rack.
Note: Make sure you tighten all the four screws to prevent the Switch from getting slanted.
3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack.
XGS4600 Series User’s Guide
33
Chapter 3 Hardware Panels
Hardware Panels
This chapter describes the front panel and rear panel of the Switch and shows you how to make the
hardware connections.
3.1 Front Panel Connections
The following figures show the front panels of the Switch.
Figure 9 Front Panel: XGS4600-32
CHAPTER 3
Figure 10 Front Panel: XGS4600-32F
Figure 11 Front Panel: XGS4600-52F
The following table describes the ports.
Table 3 Front Panel Connections
CONNECTOR DESCRIPTION
24 10/100/
1000Base-T RJ-45
Ethernet Ports or 24
SFP Slots or 48 SFP
Slots
4 GbE Combo Ports
(Dual Personality
Interfaces)
Connect these ports to a computer, a hub, an Ethernet switch or router.
Each interface has one 1000Base-T copper RJ-45 port and one SFP slot, with one port active
at a time.
• Four 1000Base-T Ports:
Connect these ports to a computer, an Ethernet switch or router.
• Four SFP Slots:
Use Small Form-Factor Pluggable (SFP) transceivers in these ports for fiber connections to
an Ethernet switch or router.
XGS4600 Series User’s Guide
34
Table 3 Front Panel Connections (continued)
CONNECTOR DESCRIPTION
4 SFP+ Slots Use SFP+ transceivers in these ports for high-bandwidth backbone connections. You can
RJ-45 out-of-band
Management Port
Console Port Only connect this port to your computer (using an RS-232 cable) if you want to configure the
Reset If you are locked out from the Switch or configuration changes cause the Switch to behave
3.1.1 Ethernet Ports
Chapter 3 Hardware Panels
also insert an SFP+ Direct Attach Copper (DAC) in the SFP+ slot.
Connect to a computer using an RJ-45 Ethernet cable for local configuration of the Switch.
Switch using the command line interface (CLI) through the console port.
abnormally and you do not have a backup configuration file or have not saved Config 1,
Config 2, or Custom Default then you must use the Reset button.
Insert a pin to press the Reset button and release after 6 seconds to have the Switch
automatically reboot and restore the factory default configuration file. You will then have to
make all your configurations again on the Switch.
If you insert a pin to press the Reset button and release before 6 seconds then the Switch will
automatically reboot only without restoring the factory default configuration file.
1 second- - - - - - -Reboot- - - - - - -6 seconds- - - - - - - -Reboot and Reset to Factory Defaults- - -
The Switch has 10GBase-T auto-negotiating, auto-crossover Ethernet ports. In 10/100 Mbps / 1/10 Gbps
Gigabit Ethernet, the speed can be 10 Mbps, 100 Mbps, 1 Gbps or 10 Gbps. The duplex mode can be
full duplex at 100 Mbps and full duplex only at 1000 Mbps.
An auto-crossover (auto-MDI/MDI-X) port automatically works with a straight-through or crossover
Ethernet cable.
When auto-negotiation is turned on, an Ethernet port negotiates with the peer automatically to
determine the connection speed and duplex mode. If the peer Ethernet port does not support autonegotiation or turns off this feature, the Switch determines the connection speed by detecting the signal
on the cable and using half duplex mode. When the Switch’s auto-negotiation is turned off, an Ethernet
port uses the pre-configured speed and duplex mode when making a connection, thus requiring you to
make sure that the settings of the peer Ethernet port are the same in order to connect.
3.1.1.1 Default Ethernet Negotiation Settings
The factory default negotiation settings for the Ethernet ports on the Switch are:
• Speed: Auto
•Duplex: Auto
• Flow control: Off
• Dual Personality Interface: Fiber module first
3.1.2 SFP/SFP+ Slots
These are four slots for Small Form-Factor Pluggable (SFP) or SFP+ modules, such as an SFP or SFP+
transceiver. The SFP+ (SFP Plus) is an enhanced version of the SFP and supports data rates of 10 Gbps. A
transceiver is a single unit that houses a transmitter and a receiver. Use a transceiver to connect a fiber
cable to the Switch. The Switch does not come with transceivers. You must use transceivers that comply
XGS4600 Series User’s Guide
35
with the Small Form-Factor Pluggable (SFP) Transceiver MultiSource Agreement (MSA). See the SFF
committee’s INF-8074i specification Rev 1.0 for details.
You can change transceivers while the Switch is operating. You can use different transceivers to
connect to Ethernet switches with different types of fiber connectors.
• Type: SFP or SFP+ connection interface
• Connection speed: 1 or 10 Gigabit per second (Gbps)
WARNING! To avoid possible eye injury, do not look into an operating
fiber module’s connectors.
HANDLING! All transceivers are static sensitive. To prevent damage from
electrostatic discharge (ESD), it is recommended you attach an ESD
preventive wrist strap to your wrist and to a bare metal surface when
you install or remove a transceiver.
STORAGE! All modules are dust sensitive. When not in use, always keep
the dust plug on. Avoid getting dust and other contaminant into the
optical bores, as the optics do not work correctly when obstructed with
dust.
3.1.2.1 Transceiver Installation
Use the following steps to install a transceiver.
1 Attach an ESD preventive wrist strap to your wrist and to a bare metal surface.
2 Align the transceiver in front of the slot opening.
3 Make sure the latch is in the lock position (latch styles vary), then insert the transceiver into the slot with
the exposed section of PCB board facing down.
4 Press the transceiver firmly until it clicks into place.
5 The Switch automatically detects the installed transceiver. Check the LEDs to verify that it is functioning
properly.
6 Remove the dust plugs from the transceiver and cables (dust plug styles vary).
7 Identify the signal transmission direction of the fiber cables and the transceiver. Insert the fiber cable into
the transceiver.
Figure 12 Latch in the Lock Position
XGS4600 Series User’s Guide
36
Figure 13 Transceiver Installation Example
Figure 14 Connecting the Fiber Cables
3.1.2.2 Transceiver Removal
Use the following steps to remove an SFP transceiver.
1 Attach an ESD preventive wrist strap to your wrist and to a bare metal surface on the chassis.
2 Remove the fiber cables from the transceiver.
Chapter 3 Hardware Panels
3 Pull out the latch and down to unlock the transceiver (latch styles vary).
Note: Make sure the transceiver’s latch is pushed all the way down, so the transceiver can be
pulled out successfully.
4 Pull the latch, or use your thumb and index finger to grasp the tabs on both sides of the transceiver, and
carefully slide it out of the slot.
Note: Do NOT pull the transceiver out by force. You could damage it. If the transceiver will not
slide out, grasp the tabs on both sides of the transceiver with a slight up or down motion
and carefully slide it out of the slot. If unsuccessful, contact Zyxel Support to prevent
damage to your Switch and transceiver.
5 Insert the dust plug into the ports on the transceiver and the cables.
Figure 15 Removing the Fiber Cables
Figure 16 Opening the Transceiver’s Latch Example
XGS4600 Series User’s Guide
37
Chapter 3 Hardware Panels
B
A
Figure 17 Transceiver Removal Example
3.1.3 Dual Personality Interfaces
There are four Dual Personality interfaces, comprising four 1000Base-T / SFP combo ports. For each
interface you can connect either to the 1000Base-T port or the SFP port. The SFP ports have priority over
the 1000Base-T ports. This means that if a SFP port and the corresponding 1000Base-T port are
connected at the same time, the 1000Base-T port will be disabled.
3.1.4 Management Port
The 1000Base-T Ethernet MGMT (management) port is used for local management. Connect directly to
this port using an Ethernet cable. You can configure the Switch through Telnet or the Web Configurator.
The default IP address of the management port is 192.168.0.1 with a subnet mask of 255.255.255.0.
3.1.5 Console Port
This console port is for troubleshooting only. With instructions from customer support, connect the male 9pin end of the RS-232 console cable to the console port of the Switch. Connect the female end to a
serial port (COM1, COM2 or other COM port) of your computer. You can use a computer with terminal
emulation software configured to the following parameters:
• VT100 terminal emulation
• 115200 bps
• No parity, 8 data bits, 1 stop bit
• No flow control
3.2 Rear Panel
The following figures show the rear panels of the Switch. The rear panels contain:
• Two power modules with power receptacles (A and B)
• XGS4600-52F: A console port for configuring the Switch using the command line interface
Figure 18 Rear Panel: XGS4600-32
XGS4600 Series User’s Guide
38
Figure 19 Rear Panel: XGS4600-32F
A
B
A
B
Figure 20 Rear Panel: XGS4600-52F (AC model)
Figure 21 Rear Panel: XGS4600-52F (DC model)
3.2.1 Grounding
Grounding is a safety measure to direct excess electric charge to the ground. It prevents damage to
the Switch, and protects you from electrocution. Use the grounding screw on the rear panel and the
ground wire of the AC power supply to ground the Switch.
Chapter 3 Hardware Panels
The grounding terminal and AC power ground where you install the Switch must follow your country’s
regulations. Qualified service personnel must ensure the building’s protective earthing terminals are
valid terminals.
Installation of Ethernet cables must be separate from AC power lines. To avoid electric surge and
electromagnetic interference, use a different electrical conduit or raceway (tube/trough or enclosed
conduit for protecting electric wiring) that is 15 cm apart, or as specified by your country’s electrical
regulations.
Any device that is located outdoors and connected to this product must be properly grounded and
surge protected. To the extent permissible by your country’s applicable law, failure to follow these
guidelines could result in damage to your Switch which may not be covered by its warranty.
Note: The specification for surge or ESD protection assumes that the Switch is properly
grounded.
1 Remove the M4 ground screw from the Switch’s rear panel.
2 Secure a green or yellow ground cable (16 AWG or smaller) to the Switch's rear panel using the M4
ground screw.
XGS4600 Series User’s Guide
39
Chapter 3 Hardware Panels
Figure 22 Grounding
3 Attach the other end of the ground cable to a grounding bar located on the rack where you install the
Switch or to an on-site grounding terminal.
Figure 23 Attach Ground Cable to Grounding Bar or On-site Grounding Terminal
4 The grounding terminal of the server rack or on-site grounding terminal must also be grounded and
connected to the building’s main grounding electrode. Make sure the grounding terminal is connected
to the buildings grounding electrode and has an earth resistance of less than 10 ohms, or according to
your country’s electrical regulations.
Figure 24 Connecting to the Building’s Main Grounding Electrode
If you are uncertain that suitable grounding is available, contact the appropriate electrical inspection
XGS4600 Series User’s Guide
40
Chapter 3 Hardware Panels
authority or an electrician.
This device must be grounded. Do this before you make other
connections.
3.2.2 AC Power Connection (AC Models Only)
Note: Make sure you are using the correct power source as shown on the panel and that no
objects obstruct the airflow of the fans (located on the side of the unit).
The Switch uses two power supply modules, one of which is redundant, so if one power module fails the
system can operate on the remaining module.
Connecting the Power
Use the following procedures to connect the Switch to a power source after you have installed it in a
rack.
Note: Use the included power cord for the AC power connection.
1 Connect the female end of the power cord to the AC power socket.
2 Connect the other end of the cord to a power outlet.
Disconnecting the Power
The power input connectors can be disconnected from the power source individually.
1 Disconnect the power cord from the power outlet.
2 Disconnect the power cord from the AC power socket.
3.2.3 DC Power Connection (DC Models Only)
The Switch uses a single ETB series terminal block plug with four pins. Use two wires to connect to a single
terminal pair, one wire for the positive terminal and one wire for the negative terminal.
Note: The current rating of the power wires must be greater than 20 Amps. The power supply
to which the Switch connects must have a built-in circuit breaker or switch to toggle the
power.
Note: When installing the Switch power wire, push the wire firmly into the terminal as deep as
possible and make sure that no exposed (bare) wire can be seen or touched.
Exposed power wire is dangerous. Use extreme care when connecting
a DC power source to the device.
To connect a power supply:
XGS4600 Series User’s Guide
41
1 Use a screwdriver to loosen the terminal block captive screws.
2 Connect one end of a power wire to the Switch’s RTN (return) pin and tighten the captive screw.
3 Connect the other end of the power wire to the positive terminal on the power supply.
4 Connect one end of a power wire to the Switch’s –48 V (input) pin and tighten the captive screw.
5 Connect the other end of the power wire to the negative terminal on the power supply.
6 Insert the terminal block plug in the Switch’s terminal block header.
3.3 LEDs
The following table describes the LEDs.
Table 4 LEDs
LED COLOR STATUS DESCRIPTION
PWR Green On The system is receiving power from the power module in the first power
PWR2 Green On The system is receiving power from the power module in the second
SYS (System) Green Blinking The system is rebooting and performing self-diagnostic tests.
FAN Green On The fan is functioning properly.
LOCATOR Blue On The firmware update is in progress. Do not turn off or reset the Switch.
MAST
(Master)
10/100/1000Base-T Ethernet Ports
Chapter 3 Hardware Panels
slot.
Amber Blinking The power module in the first power slot detects that the power system is
under 10.8 voltage or not connected.
Off The system is not receiving power from the power module in the first
power slot.
power slot.
Amber Blinking The power module in the second power slot detects that the power
system is under 10.8 voltage or not connected.
Off The system is not receiving power from the power module in the second
power slot.
On The system is on and functioning properly.
Red On The system is functioning abnormally.
Off The power is off or the system is not ready or malfunctioning.
Amber On The fan is not functioning at a proper speed or malfunctioning.
Off The fan is removed or the Switch is off.
Blinking Shows the actual location of the Switch between several devices in a
rack.
Off The locator function is disabled or the Switch is off.
Green On The Switch is acting as a standalone switch or the master in stacking.
Off The Switch is acting as a non-master member in a stack or it is in
standalone mode.
Amber On There is an error occurred when the Switch is selected as the master
member in a stack.
XGS4600 Series User’s Guide
42
Chapter 3 Hardware Panels
Table 4 LEDs (continued)
LED COLOR STATUS DESCRIPTION
1 – 28
Link/ACT
1G SFP Slots
25 – 28
Link/ACT
1G/10G SFP+ Slots
29 – 32 or 49
– 52
LNK/ACT
MGMT
(Manageme
nt)
STACK ID The LED is showing the Stack ID number of the Switch.
Green
(Right)
Amber
(Left)
Green
(Right)
Amber
(Left)
Green
(Left)
Blue
(Right)
Green
(Right)
Amber
(Left)
Blinking The port is receiving or transmitting data at 10 or 1000 Mbps.
On The port has a successful 10 or 1000 Mbps connection.
Blinking The port is receiving or transmitting data 100 Mbps.
On The port has a successful 100 Mbps connection.
Off This link is disconnected or the port is disabled.
Blinking The port is receiving or transmitting data at 1000 Mbps.
On The port has a successful 1000 Mbps connection.
Off This link is disconnected.
Blinking The port is receiving or transmitting data at 100 Mbps.
On The port has a successful 100 Mbps connection.
Off This link is disconnected.
Blinking The port is receiving or transmitting data at 1000 Mbps.
On The port has a successful 1000 Mbps connection.
Blinking The port is receiving or transmitting data at 10 Gbps.
On The port has a successful 10 Gbps connection.
Off This link is disconnected.
Blinking The system is transmitting or receiving to or from an Ethernet device at 10/
1000 Mbps through the MGMT port.
On The MGMT port is connected at 10/1000 Mbps.
Blinking The system is transmitting or receiving to or from an Ethernet device at 100
Mbps through the MGMT port.
On The MGMT port is connected at 100 Mbps.
Off The MGMT port is not connected to an Ethernet device, or the port is
disabled.
ID 0 means it is a standalone Switch.
XGS4600 Series User’s Guide
43
PART II
Technical Reference
44
4.1 Overview
This section introduces the configuration and functions of the Web Configurator.
The Web Configurator is an HTML-based management interface that allows easy system setup and
management through Internet browser. Use a browser that supports HTML5, such as Microsoft Edge,
Internet Explorer 11, Mozilla Firefox, or Google Chrome. The minimum recommended screen resolution is
1024 by 768 pixels.
In order to use the Web Configurator you need to allow:
• Web browser pop-up windows from your device.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
CHAPTER 4
Web Configurator
4.2 System Login
1 Start your web browser.
2 The Switch is a DHCP client by default. Type “http://DHCP-assigned IP” in the Location or Address field.
Press [ENTER].
If the Switch is not connected to a DHCP server, type “http://” and the static IP address of the Switch (for
example, the default management IP address is 192.168.1.1 through an in-band (non-MGMT) port and
192.168.0.1 through the MGMT port) in the Location or Address field. Press [ENTER]. Your computer must
be in the same subnet in order to access this website address.
Also, you can use the ZON Utility to check your Switch’s IP address. See Section 4.3 on page 48 for more
information on the ZON utility.
3 The following screen appears.
XGS4600 Series User’s Guide
45
Chapter 4 Web Configurator
Figure 25 Web Configurator: Login
4 Click Login to log into the Web Configurator to manage the Switch directly. The default user name is
admin and associated default password is 1234.
5 If you did not change the default administrator password and/or SNMP community values, a warning
screen displays each time you log into the Web Configurator. Click Password / SNMP to open a screen
where you can change the administrator password and SNMP community string simultaneously.
Otherwise, click Ignore to close it.
Password/SNMP Setting
Figure 26 Web Configurator: Warning
XGS4600 Series User’s Guide
46
Chapter 4 Web Configurator
Figure 27 Web Configurator: Password
Change the default administrator and/or SNMP passwords, and then click Apply to save your changes.
Table 5 Web Configurator: Password/SNMP
LABEL DESCRIPTION
Administrator
This is the default administrator account with the “admin” user name. You cannot change the default administrator
user name.
Old Password Type the existing system password (1234 is the default password when shipped).
New Password Enter your new system password. Up to 32 characters are allowed for the new password
Retype to confirm Retype your new system password for confirmation.
General Setting
Use this section to specify the SNMP version and community (password) values.
Version Select the SNMP version for the Switch. The SNMP version on the Switch must match the version
except [ ? ], [ | ], [ ' ], [ " ], [ space ], or [ , ].
on the SNMP manager. Choose SNMP version 2c (v2c), SNMP version 3 (v3) or both (v3v2c).
Note: SNMP version 2c is backwards compatible with SNMP version 1.
Get Community Enter the Get Community string, which is the password for the incoming Get- and GetNext-
requests from the management station.
The Get Community string is only used by SNMP managers using SNMP version 2c or lower.
Set Community Enter the Set Community string, which is the password for the incoming Set- requests from the
management station.
The Set Community string is only used by SNMP managers using SNMP version 2c or lower.
Trap Community Enter the Trap Community string, which is the password sent with each trap to the SNMP
manager.
The Trap Community string is only used by SNMP managers using SNMP version 2c or lower.
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
changes if it is turned off or loses power, so use the Save link on the top navigation panel to
save your changes to the non-volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
XGS4600 Series User’s Guide
47
Chapter 4 Web Configurator
4.3 Zyxel One Network (ZON) Utility
ZON Utility is a program designed to help you deploy and manage a network more efficiently. It detects
devices automatically and allows you to do basic settings on devices in the network without having to
be near it.
The ZON Utility issues requests through Zyxel Discovery Protocol (ZDP) and in response to the query, the
device responds back with basic information including IP address, firmware version, location, system
and model name in the same broadcast domain. The information is then displayed in the ZON Utility
screen and you can perform tasks like basic configuration of the devices and batch firmware upgrade
in it. You can download the ZON Utility at www.zyxel.com and install it in a computer (Windows
operating system).
4.3.1 Requirements
Before installing the ZON Utility in your computer, please make sure it meets the requirements listed
below.
Operating System
At the time of writing, the ZON Utility is compatible with:
• Windows 7 (both 32-bit / 64-bit versions)
• Windows 8 (both 32-bit / 64-bit versions)
• Windows 8.1 (both 32-bit / 64-bit versions)
• Windows 10 (both 32-bit / 64-bit versions)
Note: To check for your Windows operating system version, right-click on My Computer >
Properties. You should see this information in the General tab.
Hardware
Here are the minimum hardware requirements to use the ZON Utility on your computer.
• Core i3 processor
•2 GB RAM
• 100 MB free hard disk
• WXGA (Wide XGA 1280 by 800)
4.3.2 Run the ZON Utility
1 Double-click the ZON Utility to run it.
2 The first time you run the ZON Utility, you will see if your device and firmware version support the ZON
Utility. Click the OK button to close this screen.
XGS4600 Series User’s Guide
48
Chapter 4 Web Configurator
Figure 28 Supported Devices and Versions
If you want to check the supported models and firmware versions later, you can click the Show
information about ZON icon in the upper right of the screen. Then select the Supported model and
firmware version link. If your device is not listed here, see the device release notes for ZON Utility support.
The release notes are in the firmware zip file on the Zyxel web site.
Figure 29 ZON Utility Screen
XGS4600 Series User’s Guide
49
Chapter 4 Web Configurator
1
2
3
4
5
6
7
8
9
10 11
12
13
3 Select a network adapter to which your supported devices are connected.
Figure 30 Network Adapter
4 Click the Go button for the ZON Utility to discover all supported devices in your network.
Figure 31 Discovery
5 The ZON Utility screen shows the devices discovered.
Figure 32 ZON Utility Screen
6 Select a device and then use the icons to perform actions. Some functions may not be available for
your devices.
Note: You must know the selected device admin password before taking actions on the
device using the ZON Utility icons.
XGS4600 Series User’s Guide
50
Chapter 4 Web Configurator
Figure 33 Password Prompt
The following table describes the icons numbered from left to right in the ZON Utility screen.
Table 6 ZON Utility Icons
ICON DESCRIPTION
1 IP Configuration Change the selected device’s IP address.
2 Renew IP Address Update a DHCP-assigned dynamic IP address.
3 Reboot Device Use this icon to restart the selected devices. This may be useful when troubleshooting
or upgrading new firmware.
4 Reset Configuration to
Default
5 Locator LED Use this icon to locate the selected device by causing its Locator LED to blink.
6 Web GUI Use this to access the selected device Web Configurator from your browser. You will
7 Firmware Upgrade Use this icon to upgrade new firmware to selected devices of the same model. Make
8 Change Password Use this icon to change the admin password of the selected device. You must know
9 Configure NCC
Discovery
10 ZAC Use this icon to run the Zyxel AP Configurator of the selected AP.
11 Clear and Rescan Use this icon to clear the list and discover all devices on the connected network again.
12 Save Configuration Use this icon to save configuration changes to permanent memory on a selected
13 Settings Use this icon to select a network adapter for the computer on which the ZON utility is
Use this icon to reload the factory-default configuration file. This means that you will
lose all previous configurations.
need a user name and password to log in.
sure you have downloaded the firmware from the Zyxel website to your computer and
unzipped it in advance.
the current admin password before changing to a new one.
You must have Internet access to use this feature. Use this icon to enable or disable the
Nebula Control Center (NCC) discovery feature on the selected device. If it is
enabled, the selected device will try to connect to the NCC. Once the selected
device is connected to and has registered in the NCC, it will go into the Nebula cloud
management mode.
device.
installed, and the utility language.
The following table describes the fields in the ZON Utility main screen.
Table 7 ZON Utility Fields
LABEL DESCRIPTION
Type This field displays an icon of the kind of device discovered.
Model This field displays the model name of the discovered device.
Firmware Version This field displays the firmware version of the discovered device.
MAC Address This field displays the MAC address of the discovered device.
XGS4600 Series User’s Guide
51
Chapter 4 Web Configurator
Table 7 ZON Utility Fields (continued)
LABEL DESCRIPTION
IP Address This field displays the IP address of an internal interface on the discovered device that
first received a ZDP discovery request from the ZON Utility.
System Name This field displays the system name of the discovered device.
Location This field displays where the discovered device is.
Status This field displays whether changes to the discovered device have been done
successfully. As the Switch does not support IP Configuration, Renew IP address and
Flash Locator LED, this field displays “Update failed”, “Not support Renew IP address”
and “Not support Flash Locator LED” respectively.
Controller Discovery This field displays if the discovered device supports the Nebula Control Center (NCC)
discovery feature. If it is enabled, the selected device will try to connect to the NCC.
Once the selected device is connected to and has registered in the NCC, it will go
into the Nebula cloud management mode.
Serial Number Enter the admin password of the discovered device to display its serial number.
Hardware Version This field displays the hardware version of the discovered device.
4.4 Web Configurator Layout
The Status screen is the first screen that displays when you access the Web Configurator.
This guide uses the XGS4600-32F and XGS4600-52F screens as examples. The screens may vary slightly for
different models.
The following figure shows the navigating components of a Web Configurator screen.
XGS4600 Series User’s Guide
52
Chapter 4 Web Configurator
A
G
B
C
D
E
F
H
Figure 34 Web Configurator Layout
A
– Click the menu items to open sub-menu links, and then click on a sub-menu link to open the screen
in the main window.
B, C, D, E, F, G
you are currently working in.
B
– Click this link to update the information in the screen you are viewing currently.
C
– Click this link to save your configuration into the Switch’s non-volatile memory. Non-volatile memory
is the configuration of your Switch that stays the same even if the Switch’s power is turned off.
D
– Click this link to go to the status page of the Switch.
E
– Click this link to log out of the Web Configurator.
F
– Click this link to display web help pages. The help pages provide descriptions for all of the
configuration screens.
G
– Click this link to go to the Zyxel Community Biz Forum.
H
– Click this link to go to the Neighbor screen where you can see and manage neighbor devices
learned by the Switch.
In the navigation panel, click a main link to reveal a list of sub-menu links.
– These are quick links which allow you to perform certain tasks no matter which screen
XGS4600 Series User’s Guide
53
Chapter 4 Web Configurator
In the navigation panel, click a main link to reveal a list of sub-menu links.
Table 8 Navigation Panel Sub-links Overview
BASIC SETTING
ADVANCED
APPLICATION
IP APPLICATION MANAGEMENT
The following table describes the links in the navigation panel.
Table 9 Navigation Panel Links
LINK DESCRIPTION
Basic Settings
System Info This link takes you to a screen that displays general system and hardware monitoring
information.
General Setup This link takes you to a screen where you can configure general identification information and
time settings for the Switch.
Switch Setup This link takes you to a screen where you can set up global Switch parameters such as VLAN
IP Setup This link takes you to a screen where you can configure the IP address, subnet mask
type, MAC address learning, GARP and priority queues.
(necessary for Switch management) and set up to 128 IP routing domains.
XGS4600 Series User’s Guide
54
Chapter 4 Web Configurator
Table 9 Navigation Panel Links (continued)
LINK DESCRIPTION
Port Setup This link takes you to screens where you can configure speed, flow control and priority settings
for individual Switch ports.
Interface Setup This link takes you to a screen where you can create virtual interfaces on the Switch.
IPv6 This link takes you to a screen where you can enable an IPv6 interface and configure the IPv6
settings on the Switch.
Loopback
Interface
Stacking This link takes you to a screen where you can view and configure stacking system for the
Advanced Application
VLAN This link takes you to screens where you can configure port-based or 802.1Q VLAN
Static MAC
Forwarding
Static Multicast
Forwarding
Filtering This link takes you to a screen to set up filtering rules.
Spanning Tree
Protocol
Bandwidth Control This link takes you to screens where you can cap the maximum bandwidth allowed on a port.
Broadcast Storm
Control
Mirroring This link takes you to screens where you can copy traffic from one port or ports to another port
Link Aggregation This link takes you to a screen where you can logically aggregate physical links to form one
Port Authentication This link takes you to a screen where you can configure IEEE 802.1x port authentication as well
Port Security This link takes you to a screen where you can activate MAC address learning and set the
Time Range This link takes you to a screen where you can configure time range for time-oriented features
Classifier This link takes you to screens where you can configure the Switch to group packets based on
Policy Rule This link takes you to a screen where you can configure the Switch to perform special
Queuing Method This link takes you to a screen where you can configure queuing with associated queue
VLAN Stacking This link takes you to screens where you can activate and configure VLAN stacking.
Multicast This link takes you to screens where you can configure various multicast features, IGMP
AAA This link takes you to a screen where you can configure authentication, authorization and
IP Source Guard This link takes you to screens where you can configure filtering of unauthorized DHCP and ARP
This link takes you to a screen where you can configure the IPv4 loopback interface settings
on the Switch.
Switch.
(depending on what you configured in the Switch Setup menu). You can also configure a
protocol based VLAN or a subnet based VLAN in these screens.
This link takes you to screens where you can configure static MAC addresses for a port. These
static MAC addresses do not age out.
This link takes you to a screen where you can configure static multicast MAC addresses for
ports. These static multicast MAC addresses do not age out.
This link takes you to screens where you can configure the RSTP/MRSTP/MSTP to prevent
network loops.
This link takes you to a screen to set up broadcast filters.
in order that you can examine the traffic from the first port without interference.
logical, higher-bandwidth link.
as MAC authentication for clients communicating through the Switch.
maximum number of MAC addresses to learn on a port.
like Classifier.
the specified criteria.
treatment on the grouped packets.
weights for each port.
snooping, MLD snooping-proxy and create multicast VLANs.
accounting services through external servers. The external servers can be either RADIUS
(Remote Authentication Dial-In User Service) or TACACS+ (Terminal Access Controller AccessControl System Plus).
packets in your network.
XGS4600 Series User’s Guide
55
Chapter 4 Web Configurator
Table 9 Navigation Panel Links (continued)
LINK DESCRIPTION
Loop Guard This link takes you to a screen where you can configure protection against network loops that
occur on the edge of your network.
VLAN Mapping This link takes you to screens where you can configure VLAN mapping settings on the Switch.
Layer 2 Protocol
Tunneling
sFlow This link takes you to screens where you can configure sFlow settings on the Switch.
PPPoE This link takes you to screens where you can configure how the Switch gives a PPPoE
Errdisable This link takes you to a screens where you can view errdisable status and configure errdisable
VLAN Isolation This link takes you to a screen where you can block traffic between ports in a VLAN on the
MAC Pinning This link takes you to a screen where you can set specific ports to have priority over other ports
Private VLAN This link takes you to a screen where you can block traffic between ports in a VLAN on the
Green Ethernet This link takes you to a screen where you can configure the Switch to reduce port power
This link takes you to a screen where you can configure L2PT (Layer 2 Protocol Tunneling)
settings on the Switch.
termination server additional subscriber information that the server can use to identify and
authenticate a PPPoE client.
settings in CPU protection, errdisable detect, and errdisable recovery.
Switch.
in MAC address learning.
Switch.
consumption.
Note: Not available for XGS4600-52F.
LLDP This link takes you to a screen where you can configure LLDP settings.
Anti-Arpscan This link takes you to screens where you can enable anti-arpscan on the Switch and ports,
and view the port state. You can also create trusted hosts, view blocked hosts and unblock
them.
BPDU Guard This link takes you to screens where you can enable BPDU guard on the Switch and ports, and
OAM This link takes you to screens where you can enable Ethernet OAM on the Switch, view the
ZULD This link takes you to screens where you can enable ZULD on a port and configure related
NLB This link takes you to screens where you can configure to which MAC addresses and ports the
Wol Relay This link takes you to a screen where you can configure settings on Wake On LAN relay.
IP Application
Static Routing This link takes you to a screen where you can configure static routes. A static route defines
Policy Routing This link takes you to screens where you can configure policy routing rules.
RIP This link takes you to a screen where you can configure the RIP (Routing Information Protocol)
OSPF This link takes you to a screen where you can view the OSPF status and configure OSPF
IGMP This link takes you to a screen where you can configure the IGMP settings.
DVMRP This link takes you to a screen where you can configure the DVMRP (Distance Vector
DiffServ This link takes you to screens where you can enable DiffServ, configure marking rules and set
view the port state.
configuration of ports on which Ethernet OAM is enabled and perform remote-loopback
tests.
settings.
Switch should forward the incoming NLB (network load balancing) traffic, and map the IP
address to the MAC address of a cluster for layer-3 forwarding.
how the Switch should forward traffic by configuring the TCP/IP parameters manually.
direction and version for IPv4 RIP timer, and the method of preventing routing loops.
settings for IPv4.
Multicast Routing Protocol) settings.
DSCP-to-IEEE802.1p mappings.
XGS4600 Series User’s Guide
56
Chapter 4 Web Configurator
Table 9 Navigation Panel Links (continued)
LINK DESCRIPTION
DHCP This link takes you to screens where you can configure the DHCP settings.
VRRP This link takes you to screens where you can configure redundant virtual router for your
network.
Router Setup This link takes you to a screen where you can enable Equal-Cost MultiPath (ECMP) routing
and set the criteria the Switch uses to determine the routing path for a packet.
ARP Setup This link takes you to a screen where you can configure ARP learning mode on a per-port
Management
Maintenance This link takes you to screens where you can perform firmware and configuration file
Access Control This link takes you to screens where you can change the system login password and configure
Diagnostic This link takes you to screens where you can ping IP addresses, run traceroute, test ports.
System Log This link takes you to a screen where you can view system logs.
Syslog Setup This link takes you to a screen where you can setup system logs and a system log server.
Cluster
Management
MAC Table This link takes you to a screen where you can view the MAC address and VLAN ID of a device
IP Table This link takes you to a screen where you can view the IP addresses and VLAN ID of a device
ARP Table This link takes you to a screen where you can view the MAC address – IP address resolution
Routing Table This link takes you to a screen where you can view the routing table.
Path MTU Table This link takes you to a screen where you can view the IPv6 path MTU table.
Configure Clone This link takes you to a screen where you can copy attributes of one port to other ports.
IPv6 Neighbor
Table
Port Status This link takes you to a screen where you can view the port statistics.
Service Register This link takes you to a screen where you can view the status of your service registrations and
basis and create static ARP entries which do not age out.
maintenance as well as reboot the system.
SNMP and remote management.
This link takes you to a screen where you can configure clustering management and view its
status.
attach to a port. You can also view what kind of MAC address it is.
attached to a port.You can also view what kind of device it is.
table.
This link takes you to a screen where you can view the Switch’s IPv6 neighbor table.
upgrade licenses.
4.4.1 Change Your Password
After you log in for the first time, it is recommended you change the default administrator password.
Click Management > Access Control > Logins to display the next screen.
XGS4600 Series User’s Guide
57
Chapter 4 Web Configurator
Figure 35 Change Administrator Login Password
4.5 Save Your Configuration
When you are done modifying the settings in a screen, click Apply to save your changes back to the
run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off.
Click the Save link in the upper right of the Web Configurator to save your configuration to non-volatile
memory. Non-volatile memory refers to the Switch’s storage that remains even if the Switch’s power is
turned off.
Note: Use the Save link when you are done with a configuration session.
4.6 Switch Lockout
You could block yourself (and all others) from using in-band-management (managing through the data
ports) if you do one of the following:
1 Delete the management VLAN (default is VLAN 1).
2 Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the management port of
the Switch.
3 Filter all traffic to the CPU port.
4 Disable all ports.
5 Misconfigure the text configuration file.
6 Forget the password and/or IP address.
7 Prevent all services from accessing the Switch.
XGS4600 Series User’s Guide
58
Chapter 4 Web Configurator
8 Change a service port number but forget it.
9 You forgot to log out of the Switch from a computer before logging in again on another computer.
Note: Be careful not to lock yourself and others out of the Switch. If you do lock yourself out,
try using out-of-band management (through the management port) to configure the
Switch.
4.7 Reset the Switch
If you lock yourself (and others) from the Switch or forget the administrator password, you will need to
reload the factory-default configuration file or reset the Switch back to the factory defaults.
4.7.1 Reload the Configuration File
Uploading the factory-default configuration file replaces the current configuration file with the factorydefault configuration file. This means that you will lose all previous configurations and the speed of the
console port will be reset to the default of 115200 bps with 8 data bit, no parity, one stop bit and flow
control set to none. The password will also be reset to “1234” and the IP address to 192.168.1.1 or DHCPassigned IP.
To upload the configuration file, do the following:
1 Connect to the console port using a computer with terminal emulation software.
2 Disconnect and reconnect the Switch’s power to begin a session. When you reconnect the Switch’s
power, you will see the initial screen.
3 When you see the message “Press any key to enter Debug Mode within 3 seconds ...” press
any key to enter debug mode.
4 Type atlc after the “Enter Debug Mode” message.
5 Wait for the “Starting XMODEM upload” message before activating XMODEM upload on your
terminal.
6 After a configuration file upload, type atgo to restart the Switch.
XGS4600 Series User’s Guide
59
Chapter 4 Web Configurator
Figure 36 Resetting the Switch: through the Console Port
Bootbase Version: V1.00 | 02/21/2016 15:43:29
RAM: Size = 1048576 Kbytes
FLASH: 64M
ZyNOS Version: V4.60(ABML.0) | 04/18/2017 11:41:8
Press any key to enter debug mode within 1 second.
.....................................
Enter Debug Mode
ras> atlc
Starting XMODEM upload (CRC mode)....
CCCCCCCCCCCCCCCC
Total 393216 bytes received.
Erasing..
................................................................
OK
ras> atgo
The Switch is now reinitialized with a default configuration file including the default password of “1234”.
4.8 Log Out of the Web Configurator
Click Logout in a screen to exit the Web Configurator. You have to log in with your password again after
you log out. This is recommended after you finish a management session for security reasons.
Figure 37 Web Configurator: Logout Screen
4.9 Help
The Web Configurator’s online help has descriptions of individual screens and some supplementary
information.
Click the Help link from a Web Configurator screen to view an online help description of that screen.
XGS4600 Series User’s Guide
60
5.1 Overview
This chapter shows how to set up the Switch for an example network.
The following lists the configuration steps for the initial setup:
• Create a VLAN
• Set Port VID
• Configure Switch Management IP Address
Chapter 5 Initial Setup Example
CHAPTER 5
Initial Setup Example
5.1.1 Create a VLAN
VLANs confine broadcast frames to the VLAN group in which the ports belongs. You can do this with
port-based VLAN or tagged static VLAN with fixed port members.
In this example, you want to configure port 1 as a member of VLAN 2.
Figure 38 Initial Setup Network Example: VLAN
1 Click Advanced Application > VLAN > VLAN Configuration in the navigation panel and click the Static
VLAN Setup link.
XGS4600 Series User’s Guide
61
Chapter 5 Initial Setup Example
2 In the Static VLAN screen, select ACTIVE, enter a
descriptive name in the Name field and enter 2 in the
VLAN Group ID field for the VLAN2 network.
Note: The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to the
same VLAN ID.
3 Since the VLAN2 network is connected to port 1 on the Switch, select Fixed to configure port 1 to be a
permanent member of the VLAN only.
4 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames properly, clear
the TX Tagging check box to set the Switch to remove VLAN tags before sending.
5 Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the
Switch’s power is turned off.
5.1.2 Set Port VID
Use PVID to add a tag to incoming untagged frames received on that port so that the frames are
forwarded to the VLAN group that the tag defines.
In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on
that port get sent to VLAN 2.
Figure 39 Initial Setup Network Example: Port VID
XGS4600 Series User’s Guide
62
Chapter 5 Initial Setup Example
1 Click Advanced Applications > VLAN > VLAN
Configuration in the navigation panel. Then
click the VLAN Port Setup link.
2 Enter 2 in the PVID field for port 1 and click
Apply to save your changes back to the run-
time memory. Settings in the run-time memory
are lost when the Switch’s power is turned off.
5.1.3 Configure Switch Management IP Address
If the Switch fails to obtain an IP address from a DHCP server, the Switch will use 192.168.1.1 as the
management IP address. You can configure another IP address in a different subnet for management
purposes. The following figure shows an example.
Figure 40 Initial Setup Example: Management IP Address
1 Connect your computer to any Ethernet port on the Switch. Make sure your computer is in the same
subnet as the Switch.
2 Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the
Web Configurator. See Section 4.2 on page 45 for more information.
3 Click Basic Setting > IP Setup > IP Configuration in the navigation panel.
XGS4600 Series User’s Guide
63
Chapter 5 Initial Setup Example
4 Configure the related fields in the IP Configuration screen.
5 For the VLAN2 network, enter 192.168.2.1 as the IP address and 255.255.255.0 as the subnet mask.
6 In the VID field, enter the ID of the VLAN group to which you want this management IP address to
belong. This is the same as the VLAN ID you configure in the Static VLAN screen.
7 Click Add to save your changes back to the run-time memory. Settings in the run-time memory are lost
when the Switch’s power is turned off.
XGS4600 Series User’s Guide
64
6.1 Overview
This chapter provides some examples of using the Web Configurator to set up and use the Switch. The
tutorials include:
• How to Use DHCPv4 Snooping on the Switch
• How to Use DHCPv4 Relay on the Switch
• How to Use Auto Configuration through a DHCP Server on the Switch
Chapter 6 Tutorials
CHAPTER 6
Tutorials
6.2 How to Use DHCPv4 Snooping on the Switch
You only want DHCP server A connected to port 4 to assign IP addresses to all devices in VLAN network
(V). Create a VLAN containing ports 5, 6 and 7. Connect a computer M to the Switch for management.
Figure 41 Tutorial: DHCP Snooping Tutorial Overview
The settings in this tutorial are as the following.
Table 10 Tutorial: Settings in this Tutorial
HOST PORT CONNECTED VLAN PVID DHCP SNOOPING PORT TRUSTED
DHCP Server (A) 5 1 and 100 100 Yes
DHCP Client (B) 6 1 and 100 100 No
DHCP Client (C) 7 1 and 100 100 No
1 Access the Switch through http://192.168.1.1 by default. Log into the Switch by entering the user name
(default: admin) and password (default: 1234).
XGS4600 Series User’s Guide
65
Chapter 6 Tutorials
2 Go to Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup, and create a VLAN with
ID of 100. Add ports 5, 6 and 7 in the VLAN by selecting Fixed in the Control field as shown.
De-select Tx Tagging because you do not want outgoing traffic to contain this VLAN tag.
Click Add.
Figure 42 Tutorial: Create a VLAN and Add Ports to It
3 Go to Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup, and set the PVID of the
ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100.
Figure 43 Tutorial: Tag Untagged Frames
XGS4600 Series User’s Guide
66
Chapter 6 Tutorials
4 Go to Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping >
Configure, activate and specify VLAN 100 as the DHCP VLAN as shown. Click Apply.
Figure 44 Tutorial: Specify DHCP VLAN
5 Click the Port link at the top right.
6 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Tr usted state field for port
5 because the DHCP server is connected to port 5. Keep ports 6 and 7 Untrusted because they are
connected to DHCP clients. Click Apply.
XGS4600 Series User’s Guide
67
Chapter 6 Tutorials
Figure 45 Tutorial: Set the DHCP Server Port to Trusted
7 Go to Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping >
Configure > VLAN, show VLAN 100 by entering 100 in the Start VID and End VID fields and click Apply.
Then select Yes in the Enabled field of the VLAN 100 entry shown at the bottom section of the screen.
If you want to add more information in the DHCP request packets such as source VLAN ID or system
name, you can also select an Option82 Profile in the entry.
Figure 46 Tutorial: Enable DHCP Snooping on this VLAN
XGS4600 Series User’s Guide
68
8 Click Save at the top right of the Web Configurator to save the configuration permanently.
9 Connect your DHCP server to port 5 and a computer (as DHCP client) to either port 6 or 7. The computer
should be able to get an IP address from the DHCP server. If you put the DHCP server on port 6 or 7, the
computer will NOT be able to get an IP address.
10 To check if DHCP snooping works, go to Advanced Application > IP Source Guard > IPv4 Source Guard
Setup, you should see an IP assignment with the type DHCP-Snooping as shown.
Figure 47 Tutorial: Check the Binding If DHCP Snooping Works
You can also telnet. Use the command “show dhcp snooping binding” to see the DHCP snooping
binding table as shown next.
sysname# show dhcp snooping binding
MacAddress IpAddress Lease Type VLAN Port
----------------- --------------- ------------ ------------- ---- ---- 00:02:00:00:00:1c 10.10.1.16 6d23h59m20s dhcp-snooping 100 6
Total number of bindings: 1
6.3 How to Use DHCPv4 Relay on the Switch
This tutorial describes how to configure your Switch to forward DHCP client requests to a specific DHCP
server. The DHCP server can then assign a specific IP address based on the information in the DHCP
requests.
6.3.1 DHCP Relay Tutorial Introduction
In this example, you have configured your DHCP server (192.168.2.3) and want to have it assign a
specific IP address (say 172.16.1.18) to DHCP client A based on the system name, VLAN ID and port
number in the DHCP request. Client A connects to the Switch’s port 2 in VLAN 102.
Figure 48 Tutorial: DHCP Relay Scenario
XGS4600 Series User’s Guide
69
6.3.2 Create a VLAN
Follow the steps below to configure port 2 as a member of VLAN 102.
1 Access the Web Configurator through the Switch’s management port.
2 Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click Apply to save the settings to
the run-time memory.
Figure 49 Tutorial: Set VLAN Type to 802.1Q
Chapter 6 Tutorials
3 Click Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup.
4 In the Static VLAN screen, select ACTIVE, enter a descriptive name (VLAN 102 for example) in the Name
field and enter 102 in the VLAN Group ID field.
5 Select Fixed to configure port 2 to be a permanent member of this VLAN.
6 Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending.
7 Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the
Switch’s power is turned off.
XGS4600 Series User’s Guide
70
Chapter 6 Tutorials
Figure 50 Tutorial: Create a Static VLAN
8 Click the VLAN Configuration link in the Static VLAN Setup screen and then the VLAN Port Setup link in the
VLAN Configuration screen.
Figure 51 Tutorial: Click the VLAN Port Setting Link
9 Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so
that the frames are forwarded to the VLAN group that the tag defines.
10 Click Apply to save your changes back to the run-time memory.
XGS4600 Series User’s Guide
71
Figure 52 Tutorial: Add Tag for Frames Received on Port 2
11 Click the Save link in the upper right of the Web Configurator to save your configuration permanently.
6.3.3 Configure DHCPv4 Relay
Chapter 6 Tutorials
Follow the steps below to enable DHCP relay on the Switch and allow the Switch to add relay agent
information (such as the VLAN ID) to DHCP requests.
1 Click IP Application > DHCP > DHCPv4 and then the Global link to open the DHCP Relay screen.
2 Select the Active check box.
3 Enter the DHCP server’s IP address (192.168.2.3 in this example) in the Remote DHCP Server 1 field.
4 Select default1 or default2 in the Option 82 Profile field.
5 Click Apply to save your changes back to the run-time memory.
Figure 53 Tutorial: Set DHCP Server and Relay Information
6 Click the Save link in the upper right of the Web Configurator to save your configuration permanently.
7 The DHCP server can then assign a specific IP address based on the DHCP request.
XGS4600 Series User’s Guide
72
6.3.4 Troubleshooting
Check client A’s IP address. If it did not receive the IP address 172.16.1.18, make sure:
1 Client A is connected to the Switch’s port 2 in VLAN 102.
2 You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP
server and the Switch.
3 You clicked the Save link on the Switch to have your settings take effect.
6.4 How to Use Auto Configuration through a DHCP Server on the Switch
Follow the steps below to set up configurations on a DHCP server, TFTP server, and the Switch, so you
can load an auto configuration file automatically from a TFTP server when you reboot the Switch.
Note that you can set up a DHCP server and TFTP server either on the same device or different devices.
Also, make sure the Switch can communicate with the TFTP server.
Note: Steps order could vary according to different programs you use.
Note: You need to set up configurations on a DHCP server and TFTP server first to use auto
configuration.
Setting up a DHCP Server
1 Set up a dynamic IP addresses pool so the DHCP server will assign an IP address to the Switch in that
range.
2 Set up a TFTP server IP address, so the Switch will know where to load the auto configuration file.
3 Set up the filename of the auto configuration file, so the Switch will know which file to load when you
reboot the Switch.
• Enter the filename of an auto configuration file. The Switch will load this auto configuration file
when rebooting with DHCP option 60 disabled.
• If you want to load the auto configuration file with DHCP option 60 enabled and a Vendor Class
Identifier assigned when you reboot the Switch, follow the instruction below. Otherwise, skip this
step.
Enter the filename of an auto configuration file. Set up a Vendor Class Identifier. To have the
Switch load this auto configuration file, two conditions listed above must be met. Please refer to
the following steps to see how to set up a Vendor Class Identifier on the Switch.
Setting up a TFTP Server
1 Select a directory on the TFTP server.
2 Put the configuration files in that directory.
XGS4600 Series User’s Guide
73
Chapter 6 Tutorials
Setting up the Switch
1 Open the Web Configurator. Go to the Management > Maintenance screen, and click the Click Here
button next to the Auto Configuration field.
Figure 54 Tutorial: Auto Configuration Screen
2 Select the check box in the Active field to enable auto configuration. Select DHCP in the Mode field,
and enter the VLAN ID where the DHCP server belongs to in the DHCP VLAN ID field. Click Apply to save
your changes.
Figure 55 Tutorial: Enable Auto Configuration
3 Go to the Basic Setting > IP Setup > IP Configuration screen. Select the check box in the DHCP Client
field.
4 If you want to load the auto configuration file with DHCP option 60 enabled and a Vendor Class
Identifier assigned when you reboot the Switch, follow the instruction below. Otherwise, skip this step. In
the Basic Setting > IP Setup > IP Configuration screen, select the check box in the Option-60 field, and
enter a Vendor Class Identifier in the Class-ID field. In this example, we use “ZyxelCorp”. Click Apply to
save your changes.
XGS4600 Series User’s Guide
74
Chapter 6 Tutorials
Figure 56 Tutorial: Enable DHCP Client & Option 60
5 You need to save the current configuration in a configuration file, so the Switch will load the auto
configuration file from the TFTP server automatically when rebooting. Go to the Management >
Maintenance screen. Click the Config 1, Config 2, or Custom Default button next to the Save
Configuration field.
6 Click the same button next to Reboot System field to reboot the Switch, and load the auto configuration
setting as configured before. For example, if you save the auto configuration setting to Config 1, you
need to click the Config 1 button next to the Reboot System field.
XGS4600 Series User’s Guide
75
Chapter 6 Tutorials
Figure 57 Tutorial: Save Configuration and Reboot System
7 Go to the Management > System Log screen to see if auto configuration was performed successfully.
Figure 58 Tutorial: Log
8 Check the screens to see if it is the configuration file you want to load. If it is not, go through the steps
above to check your configurations. If it is, click Save at the top right corner of the Web Configurator to
save the configuration permanently.
Figure 59 Tutorial: Save
XGS4600 Series User’s Guide
76
7.1 Overview
This chapter describes the screens for System Status and Neighbor Details.
7.1.1 What You Can Do
• Use the Status screen (Section 7.2 on page 77) to see the Switch’s general device information, system
status, and IP addresses. You can also display other status screens for more information.
• Use the Neighbor screen (Section 7.2.1 on page 79) to view a summary and manage Switch’s
neighbor devices.
• Use the Neighbor Detail screen (Section 7.2.2 on page 80) to view more detailed information on the
Switch’s neighbor devices.
Chapter 7 Status
CHAPTER 7
Status
7.2 Status
The Status screen displays when you log into the Switch or click Status at the top right of the Web
Configurator. The Status screen displays general device information, system status, and its IP addresses.
XGS4600 Series User’s Guide
77
Figure 60 Status
Chapter 7 Status
The following table describes the labels in this screen.
Table 11 Status
LABEL DESCRIPTION
Device Information
Device Type This field displays the model name of this Switch.
System Name This field displays the name used to identify the Switch on any network.
Boot Version This field displays the version number and date of the boot module that is currently on the
System Location This field displays the geographic location of your Switch. You can change the setting in the
Firmware
Version
System Time This field displays the current date and time in the UAG. The format is mm-dd-yyyy hh:mm:ss.
Hardware
Version
System Up Time This field displays how long the Switch has been running since it last restarted or was turned on.
MAC Address This field displays the MAC addresses of the Switch.
Login
Timeout(mins)
Serial Number This field displays the serial number of this Switch. The serial number is used for device tracking
Registration
MAC Address
Switch.
Basic Setting > General Setup screen.
This field displays the version number and date of the firmware the Switch is currently running.
This field displays the hardware version number of the Switch. The integer is the generation
number of the Switch series, and the decimal is the version of the hardware change. For
example, V1.0 is a hardware version for the Switch where 1 identifies the first generation of the
Switch series, and .0 is the first hardware change.
This field displays how many minutes a management session can be left idle before the session
times out. After it times out you have to log in with your password again.
and control.
This field displays the MAC address of the Switch that you must use to register at myZyxel.com or
the NCC (Nebula Control Center).
XGS4600 Series User’s Guide
78
Chapter 7 Status
Table 11 Status (continued)
LABEL DESCRIPTION
Service Status This field displays the service name (Basic Routing for example) if a service license is enabled at
myZyxel or Not Licensed if the service license is not enabled. It also shows the amount of time
that remains if you enabled a trial license (Basic Routing | Trial 30 day(s) 0 hour(s) for example).
Detail Click this link to go to the Basic Setting > System Info screen to check other detailed information,
IP Address Information
IPv4 Address This field displays the Switch’s current IPv4 address.
Subnet Mask This field displays the Switch’s subnet mask.
Default
Gateway
IP Setup Click the link to go to the Basic Setting > IP Setup screen.
IPV6 Global
Unicast Address
IPV6 Link-Local
Address
IPv6
configuration
Device Status
and Quick
Configuration
Quick Links This section provides the shortcut link to a specific configuration screen.
such as system resource usage and the Switch temperature, fan speeds or voltage.
This field displays the IP address of the Switch’s default gateway.
This field displays the Switch’s IPv6 global unicast address
This field displays the Switch’s IPv6 link-local address.
Click the link to go to the Basic Setting > IPv6 screen.
This section shows whether a feature is enabled or not on the Switch. You can click a feature’s
Setting link to go to the configuration screen for the feature.
Hover your cursor over a red exclamation mark to display information about the feature.
7.2.1 Neighbor Screen
The Neighbor screen allows you to view a summary and manage the Switch’s neighboring devices. It
uses Layer Link Discovery Protocol (LLDP) to discover all neighbor devices connected to the Switch
including non-Zyxel devices. You can use this screen to perform tasks on the neighboring devices like
login, power cycle (turn the power off and then back on again), and reset to factory default settings.
This screen shows the neighboring device first recognized on an Ethernet port of the Switch. Device
information is displayed in gray when the neighboring device is offline.
Click Status > Neighbor to see the following screen.
XGS4600 Series User’s Guide
79
Figure 61 Status > Neighbor
The following table describes the fields in the above screen.
Table 12 Status > Neighbor
LABEL DESCRIPTION
Port This shows the port of the Switch, on which the neighboring device is discovered.
Port Name This shows the port description of the Switch.
Link This shows the speed (either 10M for 10 Mbps, 100M for 100 Mbps, 1G for 1 Gbps, or 10G for
System Name This shows the system name of the neighbor device.
IPv4 This shows the IPv4 address of the neighbor device. The IPv4 address is a hyper link that you
IPv6 This shows the IPv6 address of the neighbor device. The IPv6 address is a hyper link that you
Flush Click the Flush button to remove information about neighbors learned on the selected
7.2.2 Neighbor Detail
Use this screen to view detailed information about the neighboring devices. Device information is
displayed in gray when the neighboring device is currently offline.
10 Gbps) and the duplex (F for full duplex or H for half). This field displays Down if the port is
not connected to any device.
can click to log into and manage the neighbor device through its Web Configurator.
can click to log into and manage the neighbor device through its Web Configurator.
Select an entry’s check box to select a specific port. Otherwise, select the check box in the
table heading row to select all ports.
ports.
XGS4600 Series User’s Guide
80
Chapter 7 Status
Up to 10 neighboring device records per Ethernet port can be retained in this screen even when the
devices are offline. When the maximum number of neighboring device records per Ethernet port is
reached, new device records automatically overwrite existing offline device records, starting with the
oldest existing offline device record first.
Click the Neighbor Detail link in the Status > Neighbor screen to see the following screen.
Figure 62 Status > Neighbor > Neighbor Detail
The following table describes the fields in the above screen.
Table 13 Status > Neighbor > Neighbor Detail
LABEL DESCRIPTION
Local Port This shows the port of the Switch, on which the neighboring device is discovered.
Desc. This shows the port description of the Switch.
Link This shows the speed (either 10M for 10 Mbps, 100M for 100 Mbps, 1G for 1 Gbps, or 10G
for 10 Gbps) and the duplex (F for full duplex or H for half). This field displays Down if the
port is not connected to any device.
Remote
System Name This shows the system name of the neighbor device.
Model This shows the model name of the neighbor device. This field will show “–” for devices that
do not support the ZON utility.
Firmware This shows the firmware version of the neighbor device. This field will show “–” for devices
that do not support the ZON utility.
XGS4600 Series User’s Guide
81
Chapter 7 Status
Table 13 Status > Neighbor > Neighbor Detail (continued)
LABEL DESCRIPTION
MAC This shows the MAC address of the neighbor device.
IPv4 This shows the IPv4 address of the neighbor device. The IPv4 address is a hyper link that
you can click to log into and manage the neighbor device through its Web Configurator.
IPv6 This shows the IPv6 address of the neighbor device. The IPv6 address is a hyper link that
you can click to log into and manage the neighbor device through its Web Configurator.
Port This show the number of the neighbor device’s port which is connected to the Switch.
Desc. This shows the description of the neighbor device’s port which is connected to the
Location This shows the geographic location of the neighbor device. This field will show “–” for
Switch.
devices that do not support the ZON utility.
XGS4600 Series User’s Guide
82
8.1 Overview
This chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup, Port
Setup, Interface Setup, IPv6, and Cloud Management screens.
8.1.1 What You Can Do
• Use the System Info screen (Section 8.2 on page 83) to check the firmware version number and
monitor the Switch temperature.
• Use the General Setup screen (Section 8.3 on page 87) to configure general settings such as the
system name and time.
• Use the Switch Setup screen (Section 8.5 on page 90) to choose your VLAN type and assign priorities
to queues.
• Use the IP Setup screen (Section 8.6 on page 92) to configure the Switch IP address, default gateway
device, management VLAN ID, and proxy server.
• Use the Port Setup screen (Section 8.7 on page 97) to configure Switch port settings.
• Use the Interface Setup screens (Section 8.8 on page 99) to configure Switch interface type and
interface ID settings.
• Use the IPv6 screens (Section 8.9 on page 100) to view IPv6 status and IPv6 configuration.
• Use the Loopback Interface screen (Section 8.10 on page 114) to configure the IPv4 loopback
interface settings on the Switch.
• Use the Stacking screen (Section 8.11 on page 115) to view and configure stacking system for the
Switch.
Chapter 8 Basic Setting
CHAPTER 8
Basic Setting
8.2 System Information
In the navigation panel, click Basic Setting > System Info to display the screen as shown. Use this screen
to view general system information.
XGS4600 Series User’s Guide
83
Chapter 8 Basic Setting
Figure 63 Basic Setting > System Info (Standalone Mode)
Figure 64 Basic Setting > System Info (Stacking Mode)
XGS4600 Series User’s Guide
84
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 14 Basic Setting > System Info
LABEL DESCRIPTION
System Name This field displays the descriptive name of the Switch for identification purposes.
Product Model This field displays the product model of the Switch. Use this information when searching for
ZyNOS F/W
Version
Ethernet
Address
CPU Utilization CPU utilization quantifies how busy the system is. Current (%) displays the current percentage of
Memory
Utilization
Name This field displays the name of the memory pool.
Total (byte) This field displays the total number of bytes in this memory pool.
Used (byte) This field displays the number of bytes being used in this memory pool.
Utilization
(%)
Hardware Monitor
Temperature
Unit
Temperature
(C/F)
Current This shows the current temperature at this sensor.
MAX This field displays the maximum temperature measured at this sensor.
MIN This field displays the minimum temperature measured at this sensor.
Threshold This field displays the upper temperature limit at this sensor.
Status This field displays Normal for temperatures below the threshold and Error for those above.
FAN Speed
(RPM)
Current This field displays this fan's current speed in Revolutions Per Minute (RPM).
MAX This field displays this fan's maximum speed measured in Revolutions Per Minute (RPM).
MIN This field displays this fan's minimum speed measured in Revolutions Per Minute (RPM). "<41" is
Threshold This field displays the minimum speed at which a normal fan should work.
Status Normal indicates that this fan is functioning above the minimum speed. Error indicates that this
Voltage(V) The power supply for each voltage has a sensor that is capable of detecting and reporting if the
Current This is the current voltage reading.
MAX This field displays the maximum voltage measured at this point.
MIN This field displays the minimum voltage measured at this point.
Threshold This field displays the percentage tolerance of the voltage with which the Switch still works.
firmware upgrade or looking for other support information in the website.
This field displays the version number of the Switch 's current firmware including the date created.
This field refers to the Ethernet MAC (Media Access Control) address of the Switch.
CPU utilization.
Memory utilization shows how much DRAM memory is available and in use. It also displays the
current percentage of memory utilization.
This field displays the percentage (%) of memory being used in this memory pool.
The Switch has temperature sensors that are capable of detecting and reporting if the
temperature rises above the threshold. You may choose the temperature unit (Centigrade or
Fahrenheit) in this field.
CPU/MAC / BOARD / PHY refers to the location of the temperature sensor on the Switch printed
circuit board.
A properly functioning fan is an essential component (along with a sufficiently ventilated, cool
operating environment) in order for the device to stay within the temperature threshold. Each
fan has a sensor that is capable of detecting and reporting if the fan speed falls below the
threshold shown.
displayed for speeds too small to measure (under 2000 RPM).
fan is functioning below the minimum speed.
voltage falls out of the tolerance range.
XGS4600 Series User’s Guide
85
Table 14 Basic Setting > System Info (continued)
LABEL DESCRIPTION
Status Normal indicates that the voltage is within an acceptable operating range at this point;
otherwise Error is displayed.
Power Source This field lists the power supply modules installed in the Switch. PSU_1 is PWR1, and PSU_2 is PWR2.
Status Active indicates the Switch is currently operating from the power source to which the power
module is connected.
Standby indicates the power module is connected to a power source but the Switch is NOT
operating from it.
N/A is displayed when the power module is not connected to a power source and there is no
available power.
Hardware Status (Stacking Mode)
Slot This number identifies the Switch in the stack. Click the number to see more detailed information
Name This is the system name of the Switch in the stack.
Voltage This shows if the power supply voltage sensor is within normal tolerance range.
Temperature This shows if the temperature sensors on the Switch printed circuit board are within normal
Fan This shows if the fan sensors are within normal tolerance range.
Power Source This shows if the Switch is properly operating from the connected power source.
on the Switch.
tolerance range.
8.2.1 System Information Stacking Hardware Monitor
Click a slot number in the System Information screen to display more detailed hardware information on
a Switch.
Figure 65 Basic Setting > System Info > Hardware Monitor (Stacking Mode)
XGS4600 Series User’s Guide
86
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 15 Basic Setting > System Info > Hardware Monitor (Stacking Mode)
LABEL DESCRIPTION
SLOT This number identifies the Switch in the stack.
Temperature Unit The Switch has temperature sensors that are capable of detecting and reporting if the
Temperature BOARD, PHY, CPU and MAC refer to the location of the temperature sensors on the Switch
Current This shows the current temperature at this sensor.
MAX This field displays the maximum temperature measured at this sensor.
MIN This field displays the minimum temperature measured at this sensor.
Threshold This field displays the upper temperature limit at this sensor.
Status This field displays Normal for temperatures below the threshold and Error for those above.
Fan Speed (RPM) A properly functioning fan is an essential component (along with a sufficiently ventilated, cool
Current This field displays this fan's current speed in Revolutions Per Minute (RPM).
MAX This field displays this fan's maximum speed measured in RPM.
MIN This field displays this fan's minimum speed measured in RPM. “<41" is displayed for speeds too
Threshold This field displays the minimum speed at which a normal fan should work.
Status Normal indicates that this fan is functioning above the minimum speed. Error indicates that this
Voltage (V) The power supply for each voltage has a sensor that is capable of detecting and reporting if
Current This is the current voltage reading.
MAX This field displays the maximum voltage measured at this point.
MIN This field displays the minimum voltage measured at this point.
Threshold This field displays the percentage tolerance of the voltage with which the Switch still works.
Status Normal indicates that the voltage is within an acceptable operating range at this point;
Power Source This field lists which power sources can be connected.
Status Active indicates the Switch is currently operating from the power source. Otherwise, N/A is
temperature rises above the threshold. You may choose the temperature unit (Centigrade or
Fahrenheit) in this field.
printed circuit board.
operating environment) in order for the device to stay within the temperature threshold. Each
fan has a sensor that is capable of detecting and reporting if the fan speed falls below the
threshold shown.
small to measure (under 2000 RPM).
fan is functioning below the minimum speed.
the voltage falls out of the tolerance range.
otherwise Error is displayed.
displayed.
8.3 General Setup
Use this screen to configure general settings such as the system name and time. Click Basic Setting >
General Setup in the navigation panel to display the screen as shown.
XGS4600 Series User’s Guide
87
Chapter 8 Basic Setting
Figure 66 Basic Setting > General Setup
The following table describes the labels in this screen.
Table 16 Basic Setting > General Setup
LABEL DESCRIPTION
System Name Choose a descriptive name for identification purposes. This name consists of up to 64 printable
Location Enter the geographic location of your Switch. You can use up to 128 printable ASCII
Contact Person's
Name
Use Time Server
when Bootup
Time Server IP
Address
Time Server Sync
Interval
Current Time This field displays the time you open this menu (or refresh the menu).
New Time
(hh:min:ss)
Current Date This field displays the date you open this menu.
characters; spaces are allowed.
characters; spaces are allowed.
Enter the name of the person in charge of this Switch. You can use up to 32 printable ASCII
characters; spaces are allowed.
Enter the time service protocol that your time server uses. Not all time servers support all
protocols, so you may have to use trial and error to find a protocol that works. The main
differences between them are the time format.
When you select the Daytime (RFC 867) format, the Switch displays the day, month, year and
time with no time zone adjustment. When you use this format it is recommended that you use a
Daytime timeserver within your geographical time zone.
Time (RFC-868) format displays a 4-byte integer giving the total number of seconds since 1970/
1/1 at 0:0:0.
NTP (RFC-1305) is similar to Time (RFC-868).
None is the default value. Enter the time manually. Each time you turn on the Switch, the time
and date will be reset to 1970-1-1 0:0:0.
Enter the IP address or domain name of your timeserver. The Switch searches for the timeserver
for up to 60 seconds.
Enter the period in minutes between each time server synchronization. The Switch checks the
time server after every synchronization interval.
Enter the new time in hour, minute and second format. The new time then appears in the
Current Time field after you click Apply.
XGS4600 Series User’s Guide
88
Chapter 8 Basic Setting
Table 16 Basic Setting > General Setup (continued)
LABEL DESCRIPTION
New Date (yyyymm-dd)
Time Zone Select the time difference between UTC (Universal Time Coordinated, formerly known as GMT,
Daylight Saving
Time
Start Date Configure the day and time when Daylight Saving Time starts if you selected Daylight Saving
End Date Configure the day and time when Daylight Saving Time ends if you selected Daylight Saving
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
Cancel Click Cancel to begin configuring this screen afresh.
Enter the new date in year, month and day format. The new date then appears in the Current
Date field after you click Apply.
Greenwich Mean Time) and your time zone from the drop-down list box.
Daylight saving is a period from late spring to early fall when many countries set their clocks
ahead of normal local time by one hour to give more daytime light in the evening.
Select this option if you use Daylight Saving Time.
Time. The time is displayed in the 24 hour format. Here are a couple of examples:
Daylight Saving Time starts in most parts of the United States on the second Sunday of March.
Each time zone in the United States starts using Daylight Saving Time at 2 A.M. local time. So in
the United States you would select Second, Sunday, March and 2:00.
Daylight Saving Time starts in the European Union on the last Sunday of March. All of the time
zones in the European Union start using Daylight Saving Time at the same moment (1 A.M. GMT
or UTC). So in the European Union you would select Last, Sunday, March and the last field
depends on your time zone. In Germany for instance, you would select 2:00 because
Germany's time zone is one hour ahead of GMT or UTC (GMT+1).
Time. The time field uses the 24 hour format. Here are a couple of examples:
Daylight Saving Time ends in the United States on the first Sunday of November. Each time
zone in the United States stops using Daylight Saving Time at 2 A.M. local time. So in the United
States you would select First, Sunday, November and 2:00.
Daylight Saving Time ends in the European Union on the last Sunday of October. All of the time
zones in the European Union stop using Daylight Saving Time at the same moment (1 A.M. GMT
or UTC). So in the European Union you would select Last, Sunday, October and the last field
depends on your time zone. In Germany for instance, you would select 2:00 because
Germany's time zone is one hour ahead of GMT or UTC (GMT+1).
changes if it is turned off or loses power, so use the Save link on the top navigation panel to
save your changes to the non-volatile memory when you are done configuring.
8.4 Introduction to VLANs
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical
networks. Devices on a logical network belong to one group. A device can belong to more than one
group. With VLAN, a device cannot directly talk to or hear from devices that are not in the same groups;
the traffic must first go through a router.
In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and security among the
subscribers. When properly configured, VLAN prevents one subscriber from accessing the network
resources of another on the same LAN, thus a user will NOT see the printers and hard disks of another
user in the same building.
VLAN also increases network performance by limiting broadcasts to a smaller and more manageable
logical broadcast domain. In traditional switched environments, all broadcast packets go to each and
every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain.
XGS4600 Series User’s Guide
89
Note: VLAN is unidirectional; it only governs outgoing traffic.
8.5 Switch Setup
Click Basic Setting > Switch Setup in the navigation panel to display the screen as shown. The VLAN
setup screens change depending on whether you choose 802.1Q or Port Based in the VLAN Type field in
this screen.
Figure 67 Basic Setting Switch Setup (Standalone Mode)
Chapter 8 Basic Setting
Figure 68 Basic Setting > Switch Setup (Stacking Mode)
XGS4600 Series User’s Guide
90
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 17 Basic Setting > Switch Setup
LABEL DESCRIPTION
VLAN Type
(Standalone
mode only)
Bridge Control
Protocol
Transparency
MAC Address Learning
MAC address learning reduces outgoing traffic broadcasts. For MAC address learning to occur on a port, the port
must be active.
Aging Time Enter a time from 10 to 1000000 seconds. This is how long all dynamically learned MAC
ARP Aging Time
Aging Time Enter a time from 60 to 1000000 seconds. This is how long dynamically learned ARP entries
GARP Timer: Switches join VLANs by making a declaration. A declaration is made by issuing a Join message using
GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message terminates all registrations.
GARP timers set declaration timeout values. See the chapter on VLAN setup for more background information.
Join Timer Join Timer sets the duration of the Join Period timer for GVRP in milliseconds. Each port has a Join
Leave Timer Leave Time sets the duration of the Leave Period timer for GVRP in milliseconds. Each port has a
Leave All Timer Leave All Timer sets the duration of the Leave All Period timer for GVRP in milliseconds. Each port
Priority Queue Assignment
IEEE 802.1p defines up to eight separate traffic types by inserting a tag into a MAC-layer frame that contains bits to
define class of service. Frames without an explicit priority tag are given the default priority of the ingress port. Use
the next fields to configure the priority level-to-physical queue mapping.
Choose 802.1Q or Port Based. The VLAN Setup screen changes depending on whether you
choose 802.1Q VLAN type or Port Based VLAN type in this screen.
The Switch does not have port-based VLAN available in stacking mode (Active is enabled in
Basic Setting > Stacking > Configuration), so this field does not display in stacking mode.
Select Active to allow the Switch to handle bridging control protocols (STP, for example). You
also need to define how to treat a BPDU in the Port Setup screen.
addresses remain in the MAC address table before they age out (and must be relearned).
remain in the ARP table before they age out (and must be relearned). The setting here applies
to ARP entries which are newly added in the ARP table after you click Apply.
Period timer. The allowed Join Time range is between 100 and 65535 milliseconds; the default is
200 milliseconds. See the chapter on VLAN setup for more background information.
single Leave Period timer. Leave Time must be two times larger than Join Timer; the default is 600
milliseconds.
has a single Leave All Period timer. Leave All Timer must be larger than Leave Timer.
The Switch has eight physical queues that you can map to the eight priority levels. On the Switch, traffic assigned to
higher index queues gets through faster while traffic in lower index queues is dropped if the network is congested.
Priority Level (The following descriptions are based on the traffic types defined in the IEEE 802.1d standard (which
incorporates the 802.1p).
To map a priority level to a physical queue, select a physical queue from the drop-down menu on the right.
Priority 7 Typically used for network control traffic such as router configuration messages.
Priority 6 Typically used for voice traffic that is especially sensitive to jitter (jitter is the variations in delay).
Priority 5 Typically used for video that consumes high bandwidth and is sensitive to jitter.
Priority 4 Typically used for controlled load, latency-sensitive traffic such as SNA (Systems Network
Architecture) transactions.
Priority 3 Typically used for “excellent effort” or better than best effort and would include important
business traffic that can tolerate some delay.
Priority 2 This is for “spare bandwidth”.
Priority 1 This is typically used for non-critical “background” traffic such as bulk transfers that are allowed
but that should not affect other applications and users.
XGS4600 Series User’s Guide
91
Table 17 Basic Setting > Switch Setup (continued)
LABEL DESCRIPTION
Priority 0 Typically used for best-effort traffic.
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
Cancel Click Cancel to begin configuring this screen afresh.
8.6 IP Setup
Use the IP Setup screen to configure the default gateway device, the default domain name server and
add IP domains.
8.6.1 IP Interfaces
The Switch needs an IP address for it to be managed over the network. When the Switch (in Standalone
mode) fails to obtain an IP address from a DHCP server, the static IP address 192.168.1.1 will be
automatically added and used as the Switch’s management IP address.
Chapter 8 Basic Setting
changes if it is turned off or loses power, so use the Save link on the top navigation panel to save
your changes to the non-volatile memory when you are done configuring.
On the Switch, an IP address is not bound to any physical ports. Since each IP address on the Switch
must be in a separate subnet, the configured IP address is also known as IP interface (or routing
domain). In addition, this allows routing between subnets based on the IP address without additional
routers.
You can configure multiple routing domains on the same VLAN as long as the IP address ranges for the
domains do not overlap. To change the IP address of the Switch in a routing domain, simply add a new
routing domain entry with a different IP address in the same subnet.
You can configure up to 256 IP domains which are used to access and manage the Switch from the
ports belonging to the pre-defined VLANs.
Note: You must configure a VLAN first. Each VLAN can have multiple management IP
addresses, and you can log into the Switch through different management IP
addresses simultaneously.
8.6.2 IP Status
Figure 69 Basic Setting > IP Status
XGS4600 Series User’s Guide
92
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 18 Basic Setting > IP Status
LABEL DESCRIPTION
IP Status
Domain Name
Server
Source This field displays whether the DNS server address is configured manually (Static) or obtained
IP Interface
Index This field displays the index number of an entry.
IP Address This field displays the IP address of the Switch in the IP domain.
IP Subnet Mask This field displays the subnet mask of the Switch in the IP domain.
VID This field displays the VLAN identification number of the IP domain on the Switch.
Type This shows whether this IP address is dynamically assigned from a DHCP server or manually
Renew Click this to renew the dynamic IP address.
Release Click this to release the dynamic IP address.
This field displays the IP address of the DNS server.
automatically using DHCPv4.
assigned (Static).
8.6.3 IP Status Details
Use this screen to view IP status details. Click a number in the Index column in the IP Status screen to
display the screen as shown next.
Figure 70 Basic Setting > IP Setup > IP Status Details: Static
The following table describes the labels in this screen.
Table 19 Basic Setting > IP Setup > IP Status Details: Static
LABEL DESCRIPTION
Type This shows the IP address is manually assigned (Static).
VID This is the VLAN identification number to which an IP routing domain belongs.
IP Address This is the IP address of your Switch in dotted decimal notation for example 192.168.1.1.
IP Subnet Mask This is the IP subnet mask of your Switch in dotted decimal notation for example 255.255.255.0.
XGS4600 Series User’s Guide
93
Chapter 8 Basic Setting
Figure 71 Basic Setting > IP Setup > IP Status Details: DHCP
The following table describes the labels in this screen.
Table 20 Basic Setting > IP Setup > IP Status Details: DHCP
LABEL DESCRIPTION
Type This shows the IP address is dynamically assigned from a DHCP server (DHCP).
VID This is the VLAN identification number to which an IP routing domain belongs.
IP Address This is the IP address of your Switch in dotted decimal notation for example 192.168.1.1.
IP Subnet Mask This is the IP subnet mask of your Switch in dotted decimal notation for example 255.255.255.0.
Lease Time This displays the length of time in seconds that this interface can use the current dynamic IP
Renew Time This displays the length of time from the lease start that the Switch will request to renew its
Rebind Time This displays the length of time from the lease start that the Switch will request to get any
Lease Time Start This displays the date and time that the current dynamic IP address assignment from the DHCP
Lease Time End This displays the date and time that the current dynamic IP address assignment from the DHCP
Default
Gateway
DNS Server This displays the IP address of the primary and secondary DNS servers assigned by the DHCP
address from the DHCP server.
current dynamic IP address from the DHCP server.
dynamic IP address from the DHCP server.
server began. You should configure date and time in Basic Setting > General Setup.
server will end. You should configure date and time in Basic Setting > General Setup.
This displays the IP address of the default gateway assigned by the DHCP server. 0.0.0.0 means
no gateway is assigned.
server. 0.0.0.0 means no DNS server is assigned.
8.6.4 IP Configuration
Use this screen to configure the default gateway device, the default domain name server and add IP
domains.
XGS4600 Series User’s Guide
94
Chapter 8 Basic Setting
Figure 72 Basic Setting > IP Setup > IP Configuration
The following table describes the labels in this screen.
Table 21 Basic Setting > IP Setup > IP Configuration
LABEL DESCRIPTION
Default
Gateway
Domain Name
Server 1/2
Default
Management
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
Cancel Click Cancel to reset the fields to your previous configuration.
Type the IP address of the default outgoing gateway in dotted decimal notation, for example
192.168.1.254.
Enter a domain name server IPv4 address in order to be able to use a domain name instead of
an IP address.
Specify which traffic flow (In-Band or Out-of-band) the Switch is to send packets originating
from itself (such as SNMP traps) or packets with unknown source.
Select Out-of-band to have the Switch send the packets to the management port labeled
MGMT. This means that devices connected to the other ports do not receive these packets.
Select In-Band to have the Switch send the packets to all ports except the management port
(labeled MGMT) to which connected devices do not receive these packets.
changes if it is turned off or loses power, so use the Save link on the top navigation panel to save
your changes to the non-volatile memory when you are done configuring.
XGS4600 Series User’s Guide
95
Chapter 8 Basic Setting
Table 21 Basic Setting > IP Setup > IP Configuration (continued)
LABEL DESCRIPTION
Out-of-band Management IP Address
Use these fields to set the settings for the out-of-band management port.
IP Address Enter the out-of-band management IP address of your Switch in dotted decimal notation. For
IP Subnet
Mask
Default
Gateway
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
Cancel Click Cancel to reset the fields to your previous configuration.
IP Interface
Use these fields to create or edit IP routing domains on the Switch.
DHCP Client Select this option if you have a DHCP server that can assign the Switch an IP address, subnet
Option-60 DHCP Option 60 is used by the Switch for identification to the DHCP server using the VCI
Class-ID Type a string of up to 32 characters to identify this Switch to the DHCP server. For example, Zyxel-
Static IP
Address
IP Address Enter the IP address of your Switch in dotted decimal notation, for example, 192.168.1.1. This is
IP Subnet
Mask
VID Enter the VLAN identification number to which an IP routing domain belongs.
Add Click this to create a new entry.
example, 192.168.0.1.
Enter the IP subnet mask of your Switch in dotted decimal notation, for example, 255.255.255.0.
Enter the IP address of the default outgoing gateway in dotted decimal notation, for example,
192.168.0.254.
changes if it is turned off or loses power, so use the Save link on the top navigation panel to save
your changes to the non-volatile memory when you are done configuring.
mask, a default gateway IP address and a domain name server IP address automatically.
(Vendor Class Identifier) on the DHCP server. The Switch adds it in the initial DHCP discovery
message that a DHCP client broadcasts in search of an IP address. The DHCP server can assign
different IP addresses or options to clients with the specific VCI or reject the request from clients
without the specific VCI.
Select this and enter the device identity you want the Switch to add in the DHCP discovery
frames that go to the DHCP server. This allows the Switch to identify itself to the DHCP server.
TW.
Select this option if you do not have a DHCP server or if you wish to assign static IP address
information to the Switch. You need to fill in the following fields when you select this option.
the IP address of the Switch in an IP routing domain.
Enter the IP subnet mask of an IP routing domain in dotted decimal notation, for example,
255.255.255.0.
This saves your changes to the Switch’s run-time memory. The Switch loses these changes if it is
turned off or loses power, so use the Save link on the top navigation panel to save your changes
to the non-volatile memory when you are done configuring.
Cancel Click Cancel to reset the fields to your previous configuration.
Index This field displays the index number of an entry.
IP Address This field displays the IP address of the Switch in the IP domain.
IP Subnet Mask This field displays the subnet mask of the Switch in the IP domain.
VID This field displays the VLAN identification number of the IP domain on the Switch.
Type This field displays the type of IP address status.
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the
table heading row to select all entries.
XGS4600 Series User’s Guide
96
Table 21 Basic Setting > IP Setup > IP Configuration (continued)
LABEL DESCRIPTION
Delete Click Delete to remove the selected entry from the summary table.
Cancel Click Cancel to clear the check boxes.
8.7 Port Setup
Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel
to display the configuration screen.
Figure 73 Basic Setting > Port Setup (Standalone Mode)
Chapter 8 Basic Setting
Note: Deleting all IP subnets locks you out of the Switch.
Figure 74 Basic Setting > Port Setup (Stacking Mode)
XGS4600 Series User’s Guide
97
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 22 Basic Setting > Port Setup
LABEL DESCRIPTION
SLOT This field appears only in stacking mode. Click the drop-down list to choose the slot number of
Port This is the port index number. In stacking mode, the first number represents the slot ID and the
* Settings in this row apply to all ports.
the Switch in a stack.
second one is the port number. Please note that the default stacking ports (the last two ports of
your Switch) cannot be configured. They are reserved for stacking only.
Use this row only if you want to make some settings the same for all ports. Use this row first to set
the common settings and then make adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you make them.
Active Select this check box to enable a port. The factory default for all ports is enabled. A port must
be enabled for data transmission to occur.
Name Type a descriptive name that identifies this port. You can enter up to 128 ASCII characters
except [ ? ], [ | ], [ ' ] or [ " ].
Note: Due to space limitations, the port name may be truncated in some Web
Configurator screens.
Speed/Duplex Select the speed and the duplex mode of the Ethernet connection on this port. Choices are
Auto, Auto-1G, 10-an (10M/auto-negotiation), 10M/Full Duplex, 100-an (100M/autonegotiation), 100M/Full Duplex, 1G/Full Duplex, and 10G/Full Duplex (Gigabit connections only).
Selecting Auto-1G or Auto (auto-negotiation) allows one port to negotiate with a peer port
automatically to obtain the connection speed and duplex mode that both ends support. When
auto-negotiation is turned on, a port on the Switch negotiates with the peer automatically to
determine the connection speed and duplex mode. If the peer port does not support autonegotiation or turns off this feature, the Switch determines the connection speed by detecting
the signal on the cable and using half duplex mode. When the Switch’s auto-negotiation is
turned off, a port uses the pre-configured speed and duplex mode when making a connection,
thus requiring you to make sure that the settings of the peer port are the same in order to
connect.
Flow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory
causing packet discards and frame losses. Flow Control is used to regulate transmission of signals
to match the bandwidth of the receiving port.
The Switch uses IEEE 802.3x flow control in full duplex mode and backpressure flow control in half
duplex mode.
IEEE 802.3x flow control is used in full duplex mode to send a pause signal to the sending port,
causing it to temporarily stop sending signals when the receiving port memory buffers fill.
Back Pressure flow control is typically used in half duplex mode to send a "collision" signal to the
sending port (mimicking a state of packet collision) causing the sending port to temporarily stop
sending signals and resend later.
Select Tx Rx to allow the Switch port to send pause signal to the connected device, and for the
connected device to send a pause signal to the Switch. The Switch will temporarily stop sending
signals after receiving pause signal.
Select Tx to allow the Switch port to send pause signal to the connected device.
Select Rx to allow the connected device to send a pause signal to the Switch. The Switch will
temporarily stop sending signals.
Otherwise, select Disable.
802.1p Priority This priority value is added to incoming frames without a (802.1p) priority queue tag.
XGS4600 Series User’s Guide
98
Chapter 8 Basic Setting
Table 22 Basic Setting > Port Setup (continued)
LABEL DESCRIPTION
BPDU Control Configure the way to treat BPDUs received on this port. You must activate bridging control
protocol transparency in the Switch Setup screen first.
Select Peer to process any BPDU (Bridge Protocol Data Units) received on this port.
Select Tunnel to forward BPDUs received on this port.
Select Discard to drop any BPDU received on this port.
Select Network to process a BPDU with no VLAN tag and forward a tagged BPDU.
Media Type You can insert either an SFP+ transceiver or an SFP+ Direct Attach Copper (DAC) cable into the
10 Gigabit interface of the Switch.
Select the media type (sfp_plus or dac10g) of the SFP+ module that is attached to the 10
Gigabit interface.
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
changes if it is turned off or loses power, so use the Save link on the top navigation panel to save
your changes to the non-volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
8.8 Interface Setup
An IPv6 address is configured on a per-interface basis. The interface can be a physical interface (for
example, an Ethernet port) or a virtual interface (for example, a VLAN). The Switch supports the VLAN
interface type for IPv6 at the time of writing.
Use this screen to set IPv4 loopback interfaces for routing protocols or IPv6 interfaces on which you can
configure an IPv6 address to access and manage the Switch.
Click Basic Setting > Interface Setup in the navigation panel to display the configuration screen.
Figure 75 Basic Setting > Interface Setup
XGS4600 Series User’s Guide
99
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 23 Basic Setting > Interface Setup
LABEL DESCRIPTION
Interface Type Select the type of IPv6 interface for which you want to configure. The Switch supports the VLAN
Interface ID Specify a unique identification number (from 1 to 4094) for the VLAN interface or a unique
Add Click this to create a new entry.
Cancel Click Cancel to reset the fields to your previous configuration.
Index This field displays the index number of an entry.
Interface Type This field displays the type of interface.
Interface ID This field displays the identification number of the interface.
Interface This field displays the interface’s descriptive name which is generated automatically by the
Delete Click Delete to remove the selected entry from the summary table.
Cancel Click Cancel to clear the check boxes.
interface type for IPv6 at the time of writing.
identification number (from 0 to 2) for the loopback interface.
To have IPv6 function properly, you should configure a static VLAN with the same ID number in the
Advanced Application > VLAN screens.
This saves your changes to the Switch’s run-time memory. The Switch loses these changes if it is
turned off or loses power, so use the Save link on the top navigation panel to save your changes
to the non-volatile memory when you are done configuring.
Switch. The name is from a combination of the interface type and ID number.
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the
table heading row to select all entries.
8.9 IPv6
Use this screen to view the IPv6 interface status and configure the Switch’s management IPv6 addresses.
8.9.1 IPv6 Status
Click Basic Setting > IPv6 in the navigation panel to display the IPv6 status screen as shown next.
Figure 76 Basic Setting > IPv6
XGS4600 Series User’s Guide
100
Loading...